Impact
The Linux kernel has a defect where a processor may fail to invalidate a TLB entry while executing an INVLPGB/TLBSYNC instruction pair. This error leaves stale translation entries in the TLB, which can lead to the kernel reading or writing incorrect memory addresses. The flaw could compromise kernel integrity and affect the confidentiality and integrity of data, especially when running on affected AMD CPUs.
Affected Systems
All Linux kernel versions that have not yet incorporated the erratum fix are impacted. The problem is observed on AMD CPUs that are subject to TLBI Erratum #1718. No specific kernel version range was provided, so any kernel without the patch should be considered vulnerable.
Risk and Exploitability
The vulnerability has no publicly available CVSS score and EPSS information is unavailable, but it is recognized as a hardware erratum that can be mitigated with software. The attack surface is primarily local or privileged attackers, as they can trigger the bug by causing the kernel to execute INVLPGB/TLBSYNC sequences. The flaw does not appear to be easily exploitable from an unprivileged context. Because the flaw affects core kernel memory management, the potential impact is high for affected systems. The situation warrants updating the kernel or applying the workaround as soon as possible.
OpenCVE Enrichment