Description
When SMT is enabled, certain AMD processors may speculatively execute instructions using a target
from the sibling thread after an SMT mode switch potentially resulting in information disclosure.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| AMD | 1st Gen AMD EPYC™ Processors | Contact your OS vendor | — |
| AMD | 2nd Gen AMD EPYC™ Processors | Contact your OS vendor | — |
| AMD | Athlon™ X4 Processor | Contact your OS vendor | — |
| AMD | Ryzen™ Threadripper™ PRO Processor | Contact your OS vendor | — |
| AMD | 2nd Gen AMD Ryzen™ Threadripper™ Processors | Contact your OS vendor | — |
| AMD | 3rd Gen AMD Ryzen™ Threadripper™ Processors | Contact your OS vendor | — |
| AMD | 7th Generation AMD A-Series APUs | Contact your OS vendor | — |
| AMD | Ryzen™ 2000 Series Processors | Contact your OS vendor | — |
| AMD | Ryzen™ 3000 Series Processors | Contact your OS vendor | — |
| AMD | Ryzen™ 4000 Series Processors | Contact your OS vendor | — |
| AMD | Ryzen™ 5000 Series Processors | Contact your OS vendor | — |
| AMD | Athlon™ Mobile Processors | Contact your OS vendor | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 6.1.12-1 | — |
| Debian 14 | xen | 4.17.0+46-gaaf74a532c-1 | — |
| Debian 13 | linux | 6.1.12-1 | — |
| Debian 13 | xen | 4.17.0+46-gaaf74a532c-1 | — |
| Debian 12 | linux | 6.1.12-1 | — |
| Debian 12 | xen | 4.17.0+46-gaaf74a532c-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Nvidia-BlueField 22.04 LTS | linux-bluefield | 5.15.0-1017.19 | — |
| Ubuntu 26.10 | xen | No fix yet | — |
| Ubuntu 26.04 LTS | xen | No fix yet | — |
| Ubuntu 25.10 | xen | No fix yet | — |
| Ubuntu 24.04 LTS | xen +1 | No fix yet | — |
Show 13 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 22.04 LTS | linux +1 | 5.15.0-72.79 | USN-6080-1 |
| Ubuntu 22.04 LTS | linux-allwinner-5.19 | 5.19.0-1012.12~22.04.1 | — |
| Ubuntu 22.04 LTS | linux-aws | 5.15.0-1036.40 | USN-6080-1 |
| Ubuntu 22.04 LTS | linux-azure | 5.15.0-1038.45 | USN-6080-1 |
| Ubuntu 22.04 LTS | linux-azure-5.19 | 5.19.0-1026.29~22.04.1 | USN-6079-1 |
| Ubuntu 22.04 LTS | linux-azure-fde | 5.15.0-1038.45.1 | USN-6080-1 |
| Ubuntu 22.04 LTS | linux-gcp | 5.15.0-1034.42 | USN-6090-1 |
| Ubuntu 22.04 LTS | linux-gke +1 | 5.15.0-1033.38 | USN-6090-1, USN-6080-1 |
| Ubuntu 22.04 LTS | linux-gkeop | 5.15.0-1020.25 | USN-6090-1 |
| Ubuntu 22.04 LTS | linux-hwe-5.19 | 5.19.0-42.43~22.04.1 | USN-6096-1 |
| Ubuntu 22.04 LTS | linux-ibm | 5.15.0-1030.33 | USN-6080-1 |
| Ubuntu 22.04 LTS | linux-intel-iotg | 5.15.0-1030.35 | USN-6133-1 |
| Ubuntu 22.04 LTS | linux-nvidia | 5.15.0-1025.25 | — |
| Ubuntu 22.04 LTS | linux-oem-6.0 | 6.0.0-1021.21 | USN-6385-1 |
| Ubuntu 22.04 LTS | linux-oem-6.1 | 6.1.0-1008.8 | USN-5978-1 |
| Ubuntu 22.04 LTS | linux-oracle | 5.15.0-1035.41 | USN-6080-1 |
| Ubuntu 22.04 LTS | linux-raspi | 5.15.0-1029.31 | USN-6085-1 |
| Ubuntu 22.04 LTS | xen +3 | No fix yet | — |
| Ubuntu 20.04 LTS | linux | 5.4.0-156.173 | USN-6284-1 |
| Ubuntu 20.04 LTS | linux-aws | 5.4.0-1107.115 | USN-6284-1 |
| Ubuntu 20.04 LTS | linux-aws-5.15 | 5.15.0-1036.40~20.04.1 | USN-6080-1 |
| Ubuntu 20.04 LTS | linux-azure | 5.4.0-1114.120 | USN-6331-1 |
| Ubuntu 20.04 LTS | linux-azure-5.15 | 5.15.0-1038.45~20.04.1 | USN-6080-1 |
| Ubuntu 20.04 LTS | linux-azure-fde-5.15 | 5.15.0-1038.45~20.04.1.1 | USN-6080-1 |
| Ubuntu 20.04 LTS | linux-bluefield | 5.4.0-1068.74 | USN-6314-1 |
| Ubuntu 20.04 LTS | linux-gcp | 5.4.0-1110.119 | USN-6284-1 |
| Ubuntu 20.04 LTS | linux-gcp-5.15 | 5.15.0-1034.42~20.04.1 | USN-6090-1 |
| Ubuntu 20.04 LTS | linux-gke | 5.4.0-1105.112 | USN-6312-1 |
| Ubuntu 20.04 LTS | linux-gke-5.15 | 5.15.0-1033.38~20.04.1 | USN-6090-1 |
| Ubuntu 20.04 LTS | linux-gkeop | 5.4.0-1074.78 | USN-6284-1 |
| Ubuntu 20.04 LTS | linux-gkeop-5.15 | 5.15.0-1020.25~20.04.1 | — |
| Ubuntu 20.04 LTS | linux-hwe-5.15 +1 | 5.15.0-72.79~20.04.1 | USN-6080-1 |
| Ubuntu 20.04 LTS | linux-ibm | 5.4.0-1054.59 | USN-6314-1 |
| Ubuntu 20.04 LTS | linux-intel-iotg-5.15 | 5.15.0-1030.35~20.04.1 | USN-6134-1 |
| Ubuntu 20.04 LTS | linux-iot | 5.4.0-1019.20 | USN-6284-1 |
| Ubuntu 20.04 LTS | linux-kvm | 5.4.0-1096.102 | USN-6284-1 |
| Ubuntu 20.04 LTS | linux-nvidia-tegra-5.15 | 5.15.0-1014.14~20.04.1 | — |
| Ubuntu 20.04 LTS | linux-oracle | 5.4.0-1106.115 | USN-6284-1 |
| Ubuntu 20.04 LTS | linux-oracle-5.15 | 5.15.0-1035.41~20.04.1 | USN-6090-1 |
| Ubuntu 20.04 LTS | linux-raspi | 5.4.0-1091.102 | USN-6284-1 |
| Ubuntu 20.04 LTS | linux-riscv-5.15 | 5.15.0-1033.37~20.04.1 | — |
| Ubuntu 20.04 LTS | linux-xilinx-zynqmp | 5.4.0-1027.31 | USN-6301-1 |
| Ubuntu 20.04 LTS | xen +25 | No fix yet | — |
| Ubuntu 18.04 LTS | xen +15 | No fix yet | — |
| Ubuntu 16.04 LTS | xen +1 | No fix yet | — |
| Ubuntu Pro Realtime 22.04 LTS | linux-intel-iot-realtime | 5.15.0-1028.33 | — |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime | 5.15.0-1038.41 | — |
| Ubuntu Pro FIPS 20.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS 18.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-aws-fips | 5.4.0-1107.115+fips1 | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-azure-fips | 5.4.0-1113.119+fips1 | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-fips | 5.4.0-1082.91 | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-gcp-fips | 5.4.0-1110.119+fips1 | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-aws-fips | 4.15.0-2100.106 | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-azure-fips | 4.15.0-2079.85 | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-fips | 4.15.0-1116.127 | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-gcp-fips | 4.15.0-2063.68 | — |
| Ubuntu Pro 20.04 LTS | linux-azure-fde-5.15 | 5.15.0-1114.123~20.04.1 | — |
| Ubuntu Pro 18.04 LTS | linux | 4.15.0-218.229 | USN-6396-1 |
| Ubuntu Pro 18.04 LTS | linux-aws | 4.15.0-1161.174 | USN-6396-1 |
| Ubuntu Pro 18.04 LTS | linux-aws-5.4 | 5.4.0-1107.115~18.04.1 | USN-6284-1 |
| Ubuntu Pro 18.04 LTS | linux-azure-4.15 | 4.15.0-1170.185 | USN-6396-1 |
| Ubuntu Pro 18.04 LTS | linux-azure-5.4 | 5.4.0-1113.119~18.04.1 | USN-6337-1 |
| Ubuntu Pro 18.04 LTS | linux-gcp-4.15 | 4.15.0-1155.172 | USN-6396-1 |
| Ubuntu Pro 18.04 LTS | linux-gcp-5.4 | 5.4.0-1110.119~18.04.1 | USN-6284-1 |
| Ubuntu Pro 18.04 LTS | linux-hwe-5.4 | 5.4.0-156.173~18.04.1 | USN-6301-1 |
| Ubuntu Pro 18.04 LTS | linux-ibm-5.4 | 5.4.0-1054.59~18.04.1 | USN-6312-1 |
| Ubuntu Pro 18.04 LTS | linux-kvm | 4.15.0-1145.150 | USN-6396-2 |
| Ubuntu Pro 18.04 LTS | linux-oracle | 4.15.0-1124.135 | USN-6396-1 |
| Ubuntu Pro 18.04 LTS | linux-oracle-5.4 | 5.4.0-1106.115~18.04.1 | USN-6284-1 |
| Ubuntu Pro 18.04 LTS | linux-raspi-5.4 | 5.4.0-1091.102~18.04.1 | USN-6284-1 |
| Ubuntu Pro 16.04 LTS | linux-aws-hwe | 4.15.0-1161.174~16.04.1 | USN-6396-1 |
| Ubuntu Pro 16.04 LTS | linux-azure | 4.15.0-1170.185~16.04.1 | USN-6396-1 |
| Ubuntu Pro 16.04 LTS | linux-gcp | 4.15.0-1155.172~16.04.1 | USN-6396-1 |
| Ubuntu Pro 16.04 LTS | linux-hwe | 4.15.0-218.229~16.04.1 | USN-6396-1 |
| Ubuntu Pro 16.04 LTS | linux-oracle | 4.15.0-1124.135~16.04.1 | USN-6396-1 |
| Ubuntu Pro 14.04 LTS | linux-azure | 4.15.0-1170.185~14.04.1 | USN-6396-3 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9.2 EUS | bpftool | 7.0.0-284.40.1.el9_2 | RHSA-2023:7370 |
| RHEL 9.2 EUS | kernel-rt +14 | 5.14.0-284.40.1.rt14.325.el9_2 | RHSA-2023:7379 |
| RHEL 9.2 EUS | perf +48 | 5.14.0-284.40.1.el9_2 | RHSA-2023:7370 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP4 | xen | 4.16.3_04-150400.4.22.1 | SUSE-SU-2023:0692-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLE Micro 5.3 | xen | 4.16.3_04-150400.4.22.1 | SUSE-SU-2023:0692-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | xen | 4.17.0_04-3.1 | openSUSE-SU-2024:12715-1 |
| openSUSE Leap 15.4 | xen | 4.16.3_04-150400.4.22.1 | SUSE-SU-2023:0692-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap Micro 5.3 | xen | 4.16.3_04-150400.4.22.1 | SUSE-SU-2023:0692-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | xen | 4.17.0-r2 | — |
| Alpine v3.23 | xen | 4.17.0-r2 | — |
| Alpine v3.22 | xen | 4.17.0-r2 | — |
| Alpine v3.21 | xen | 4.17.0-r2 | — |
| Alpine v3.20 | xen | 4.17.0-r2 | — |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.19 | xen | 4.17.0-r2 | — |
| Alpine v3.18 | xen | 4.17.0-r2 | — |
| Alpine v3.17 | xen | 4.16.4-r0 | — |
| Alpine v3.16 | xen | 4.16.4-r0 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | kernel-livepatch-6.1.12-17.42 | 1.0-0.amzn2023 | ALAS2023-2023-132 |
| Amazon Linux 2023 | perf +12 | 6.1.12-17.42.amzn2023 | ALAS2023-2023-132 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 7 | kernel-uek +4 | 5.4.17-2136.318.7.1.el8uek | ELSA-2023-12255 |
| Oracle Linux 7 | kernel-uek-container +1 | 5.4.17-2136.318.7.1.el8 | ELSA-2023-12256 |
| Oracle Linux 7 | perf +3 | 5.4.17-2136.318.7.1.el7uek | ELSA-2023-12255 |
Advisories 26
- USN-6385-1 linux-oem-6.0 vulnerabilities Ubuntu Security Notices (USN) · Oct 23, 2026
- USN-6085-1 linux-raspi vulnerabilities Ubuntu Security Notices (USN) · Oct 23, 2026
- USN-6080-1 linux, linux-aws, linux-aws-5.15, linux-azure, linux-azure-5.15, linux-azure-fde, linux-azure-fde-5.15, linux-hwe-5.15, linux-ibm, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-oracle vulnerabilities Ubuntu Security Notices (USN) · Oct 23, 2026
- USN-6090-1 linux-gcp, linux-gcp-5.15, linux-gke, linux-gke-5.15, linux-gkeop, linux-oracle-5.15 vulnerabilities Ubuntu Security Notices (USN) · Oct 23, 2026
- USN-6134-1 linux-intel-iotg-5.15 vulnerabilities Ubuntu Security Notices (USN) · Oct 23, 2026
- USN-6079-1 linux, linux-aws, linux-azure, linux-azure-5.19, linux-kvm, linux-lowlatency, linux-raspi vulnerabilities Ubuntu Security Notices (USN) · Oct 23, 2026
- USN-6096-1 linux-gcp, linux-hwe-5.19 vulnerabilities Ubuntu Security Notices (USN) · Oct 23, 2026
- USN-6133-1 linux-intel-iotg vulnerabilities Ubuntu Security Notices (USN) · Oct 23, 2026
- USN-5978-1 linux-oem-6.1 vulnerabilities Ubuntu Security Notices (USN) · Oct 23, 2026
- USN-6396-3 linux-azure vulnerabilities Ubuntu Security Notices (USN) · Oct 22, 2026
- USN-6396-1 linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-gcp, linux-gcp-4.15, linux-hwe, linux-oracle vulnerabilities Ubuntu Security Notices (USN) · Oct 22, 2026
- USN-6337-1 linux-azure-5.4 vulnerabilities Ubuntu Security Notices (USN) · Oct 22, 2026
- USN-6314-1 linux-bluefield, linux-ibm vulnerabilities Ubuntu Security Notices (USN) · Oct 22, 2026
- USN-6301-1 linux-hwe-5.4, linux-xilinx-zynqmp vulnerabilities Ubuntu Security Notices (USN) · Oct 22, 2026
- USN-6331-1 linux-azure vulnerabilities Ubuntu Security Notices (USN) · Oct 22, 2026
- USN-6284-1 linux, linux-aws, linux-aws-5.4, linux-gcp, linux-gcp-5.4, linux-gkeop, linux-iot, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4 vulnerabilities Ubuntu Security Notices (USN) · Oct 22, 2026
- USN-6396-2 linux-kvm vulnerabilities Ubuntu Security Notices (USN) · Oct 22, 2026
- USN-6312-1 linux-gke, linux-ibm-5.4 vulnerabilities Ubuntu Security Notices (USN) · Oct 22, 2026
- RHSA-2023:7379 Red Hat Security Advisory: kernel-rt security update Red Hat Security Advisories (RHSA) · Oct 10, 2026
- RHSA-2023:7370 Red Hat Security Advisory: kernel security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 10, 2026
- SUSE-SU-2023:0692-1 Security update for xen SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:12715-1 xen-4.17.0_04-3.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- ALAS2023-2023-132 Important: kernel security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Jun 5, 2025
- WID-SEC-2023-0378 AMD Prozessoren: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Nov 21, 2023
- ELSA-2023-12256 Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Apr 17, 2023
- ELSA-2023-12255 Important: Unbreakable Enterprise kernel security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Apr 17, 2023