CVE-2025-37751 x86/cpu: Avoid running off the end of an AMD erratum table
A missing NULL terminator in an AMD erratum table causes the Linux kernel to read past the array end, potentially leading to a system crash.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-37751?
CVE-2025-37751 is a high-severity vulnerability in Linux kernel, published on 1 May 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
x86/cpu: Avoid running off the end of an AMD erratum table
The NULL array terminator at the end of erratum_1386_microcode was removed during the switch from x86_cpu_desc to x86_cpu_id. This causes readers to run off the end of the array.
Replace the NULL.
Which versions are affected by CVE-2025-37751?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2025-37751?
Apply the vendor's patch.
Is CVE-2025-37751 being exploited?
There is no known exploitation of CVE-2025-37751 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2025-37751, GHSA-w8jp-xg39-86rf, UBUNTU-CVE-2025-37751.