An improper isolation of shared resources in the AMD Zen2 instruction cache can lead to instruction corruption. When the op cache is accessed by multiple processes, critical data may be overwritten, causing the kernel execution flow to deviate unpredictably or crash. This flaw falls under the weaknesses classified as CWE-653 and CWE-862. The resulting instruction corruption may compromise kernel stability, potentially leading to system crashes or unpredictable behavior.

All Linux kernel versions built to run on AMD Zen2 processors are potentially affected if they have not incorporated the op-cache isolation commit. The impacted releases include kernels from 4.14 (including RCs 2 through 8) up to the 7.1 series (up to RC3). Kernels that have applied the upstream fix or subsequent releases are not affected.

The CVSS score of 8.8 indicates a high severity vulnerability. The EPSS score of <1% shows a very low but non‑zero probability of exploitation, and the flaw is not listed in CISA’s KEV catalog. The likely attack vector is local, requiring privilege escalation to kernel space, as the vulnerable code runs in the kernel and the attacker must trigger the op cache to access improperly isolated resources. Remote exploitation is not documented in the available information.