Bug 2477784 (CVE-2025-54518)

Summary:	CVE-2025-54518 kernel: xen: AMD Zen 2 Processors: Privilege escalation via improper CPU cache isolation
Product:	[Other] Security Response	Reporter:	OSIDB Bzimport <bzimport>
Component:	vulnerability	Assignee:	Product Security DevOps Team <prodsec-dev>
Status:	NEW ---	QA Contact:
Severity:	high	Docs Contact:
Priority:	high
Version:	unspecified	CC:	rhel-process-autobot, watson-tool-maintainers
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	---
Doc Text:	A flaw was found in AMD Zen 2-based processors, affecting components such as the kernel and Xen hypervisor. Improper isolation of shared resources within the CPU operation cache could allow an attacker to corrupt instructions executed at a different privilege level. This could potentially result in privilege escalation, granting an attacker higher system access than intended.	Story Points:	---
Clone Of:		Environment:
Last Closed:		Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description OSIDB Bzimport 2026-05-15 05:01:50 UTC

Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a different privilege level, potentially resulting in privilege escalation.

Comment 4 errata-xmlrpc 2026-08-06 03:08:28 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2026:50979 https://access.redhat.com/errata/RHSA-2026:50979

Comment 5 errata-xmlrpc 2026-08-06 03:30:07 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2026:50978 https://access.redhat.com/errata/RHSA-2026:50978

Comment 6 errata-xmlrpc 2026-08-11 09:09:16 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:53329 https://access.redhat.com/errata/RHSA-2026:53329

Comment 7 errata-xmlrpc 2026-08-12 00:41:30 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
  Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On

Via RHSA-2026:53989 https://access.redhat.com/errata/RHSA-2026:53989

Comment 8 errata-xmlrpc 2026-08-12 00:57:59 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.6 Extended Update Support

Via RHSA-2026:53990 https://access.redhat.com/errata/RHSA-2026:53990

Comment 9 errata-xmlrpc 2026-08-17 02:31:36 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
  Red Hat Enterprise Linux 8.8 Telecommunications Update Service

Via RHSA-2026:55444 https://access.redhat.com/errata/RHSA-2026:55444

Comment 10 errata-xmlrpc 2026-08-18 12:25:20 UTC

This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.22

Via RHSA-2026:54769 https://access.redhat.com/errata/RHSA-2026:54769

Comment 11 errata-xmlrpc 2026-08-19 00:59:43 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions

Via RHSA-2026:56573 https://access.redhat.com/errata/RHSA-2026:56573

Comment 12 errata-xmlrpc 2026-08-24 14:33:09 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
  Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On

Via RHSA-2026:59091 https://access.redhat.com/errata/RHSA-2026:59091