Impact
An improper isolation of shared resources in the AMD Zen2 instruction cache can lead to instruction corruption. When the op cache is accessed by multiple processes, critical data may be overwritten, causing the kernel execution flow to deviate unpredictably or crash. This flaw falls under CWE-653 and may ultimately allow arbitrary code execution or severe system instability if an attacker can trigger the offending cache behavior.
Affected Systems
Linux kernel builds that run on AMD Zen2 processors and have not yet received the op‑cache isolation commit are affected. The vulnerability is present in all officially supported kernel releases prior to the patches referenced in the advisory; specific version ranges are not enumerated in the payload.
Risk and Exploitability
The CVSS score of 8.8 indicates high severity, while the EPSS score of <1% shows a very low but non‑zero probability of exploitation. The flaw is not listed in CISA’s KEV catalog. According to the description, the attack vector is most likely local with kernel or root privileges, as the attacker must provoke the op cache to access improperly isolated resources. Remote exploitation is not documented in the available information.
OpenCVE Enrichment
Debian DLA
Debian DSA