Description
In the Linux kernel, the following vulnerability has been resolved:

x86/CPU/AMD: Fix AMD TLBI Erratum #1718

The processor may fail to invalidate a TLB entry while executing an
INVLPGB/TLBSYNC instruction pair.

Detect the erratum and apply a software workaround when a microcode fix
is not present.
Published: 2026-10-26
Score: n/a
EPSS: n/a
KEV: No
Impact: Flawed TLB invalidation causing stale translation entries and potential memory corruption or data leakage
Action: Immediate Patch
AI Analysis

Impact

The Linux kernel has a defect where a processor may fail to invalidate a TLB entry while executing an INVLPGB/TLBSYNC instruction pair. This error leaves stale translation entries in the TLB, which can lead to the kernel reading or writing incorrect memory addresses. The flaw could compromise kernel integrity and affect the confidentiality and integrity of data, especially when running on affected AMD CPUs.

Affected Systems

All Linux kernel versions that have not yet incorporated the erratum fix are impacted. The problem is observed on AMD CPUs that are subject to TLBI Erratum #1718. No specific kernel version range was provided, so any kernel without the patch should be considered vulnerable.

Risk and Exploitability

The vulnerability has no publicly available CVSS score and EPSS information is unavailable, but it is recognized as a hardware erratum that can be mitigated with software. The attack surface is primarily local or privileged attackers, as they can trigger the bug by causing the kernel to execute INVLPGB/TLBSYNC sequences. The flaw does not appear to be easily exploitable from an unprivileged context. Because the flaw affects core kernel memory management, the potential impact is high for affected systems. The situation warrants updating the kernel or applying the workaround as soon as possible.

Generated by OpenCVE AI on October 26, 2026 at 16:35 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the latest Linux kernel release that includes the erratum fix
  • If immediate kernel upgrade is not feasible, apply the software workaround that detects the erratum and performs an additional TLBSYNC
  • Update AMD processor microcode to a version that contains the microcode patch for Erratum 1718
  • Verify that the BIOS and firmware are up to date to ensure microcode updates are correctly applied

Generated by OpenCVE AI on October 26, 2026 at 16:35 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 26 Oct 2026 20:00:00 +0000

Type Values Removed Values Added
First Time appeared Linux linux
Vendors & Products Linux linux

Mon, 26 Oct 2026 17:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-264

Mon, 26 Oct 2026 15:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Fix AMD TLBI Erratum #1718 The processor may fail to invalidate a TLB entry while executing an INVLPGB/TLBSYNC instruction pair. Detect the erratum and apply a software workaround when a microcode fix is not present.
Title x86/CPU/AMD: Fix AMD TLBI Erratum #1718
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-10-26T14:52:04.997Z

Reserved: 2026-09-25T10:25:14.391Z

Link: CVE-2026-99099

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-26T15:16:48.990

Modified: 2026-10-26T15:16:48.990

Link: CVE-2026-99099

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-26T19:45:11Z

Weaknesses