CVE-2025-68313

Updated on 16 Dec 2025

Severity

5.5 Medium severity

Details

CVSS score
5.5

Overview

About vulnerability

In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Add RDSEED fix for Zen5 There’s an issue with RDSEED’s 16-bit and 32-bit register output variants on Zen5 which return a random value of 0 “at a rate inconsistent with randomness while incorrectly signaling success (CF=1)”. Search the web for AMD-SB-7055 for more detail. Add a fix glue which checks microcode revisions. [ bp: Add microcode revisions checking, rewrite. ] A flaw was found in the Linux kernel. A local user could exploit a vulnerability in the RDSEED (Random Seed) instruction on AMD Zen5 processors. This issue causes the RDSEED instruction to return a random value of zero, which is inconsistent with expected randomness and incorrectly signals success. This can lead to a denial of service (DoS) by compromising operations that rely on high-quality random number generation.

Details

KernelCare state

Live-patch status from KernelCare for each operating system.

Operating system Status Covered kernels
Debian 13 Will Not Fix
Ubuntu 24.04 Planned
Ubuntu 24.04 AWS Planned