Description
A transient execution vulnerability in some AMD processors may allow an attacker with the ability to execute code on the system to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across privileged boundaries.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| AMD | AMD EPYC™ 9005 Series Processors | — | TurinPI_1.0.0.B |
| AMD | AMD EPYC™ 8005 Series Processors | — | TurinPI_1.0.0.B |
| AMD | AMD Ryzen™ 9000HX Series Processors | — | FireRangeFL1 PI-1.0.0.0i |
| AMD | AMD Ryzen™ AI 300 Series Processors | — | StrixKrackanPI-FP8_1.1.0.0h |
| AMD | AMD Ryzen™ 9000 Series Desktop Processors | — | ComboAM5PI_1.2.0.3l |
| AMD | AMD Ryzen™ AI Max 400 Series Processors | — | GorgonHalo PI FP11_1.0.0.0b |
| AMD | AMD Ryzen™ AI Max 300 Series Processors | — | StrixHalo PI-FP11_1.0.0.2d |
| AMD | AMD Ryzen™ AI 400 Series Desktop Processors | — | ComboAM5PI_1.3.0.1d |
| AMD | AMD Ryzen™ Z1 Series Processors | — | StrixKrackanPI-FP8_1.1.0.0h |
| AMD | AMD Ryzen™ Z2 Series Processors Extreme | — | StrixKrackanPI-FP8_1.1.0.0h |
| AMD | AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors | — | ShimadaPeakPI-SP6-1.0.0.1h |
| AMD | AMD Ryzen™ Threadripper™ 7000 Processors | — | ShimadaPeakPI-SP6-1.0.0.1h |
| AMD | AMD Ryzen™ AI 400 Series Processors | — | GorgonPI-FP8_1.0.0.2e |
| AMD | AMD Ryzen™ Threadripper™ 9000 Processors | — | ShimadaPeakPI-SP6-1.0.0.1h |
| AMD | AMD Ryzen™ Threadripper™ PRO 9000 WX-Series Processors | — | ShimadaPeakPI-SP6-1.0.0.1h |
| AMD | AMD EPYC™ Embedded 9005 Series Processors | — | EmbeddedTurinPI_SP5_1005 |
| AMD | AMD Ryzen™ Embedded 9000 Series Processors | — | EmbeddedAM5PI_1.0.0.9 |
| AMD | AMD EPYC™ Embedded 2005 Series Processors | — | EmbeddedFireRangeFL1_1.0.0.5 |
| AMD | AMD Ryzen™ Embedded P100 Series Processors | — | EmbeddedP100 PI 1000 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | xen +1 | No fix yet | — |
| Debian 13 | xen +1 | No fix yet | — |
| Debian 12 | xen +1 | No fix yet | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | kernel-uek +34 | 6.12.0-208.112.5.1.el10uek | ELSA-2026-500587 |
| Oracle Linux 8 | bpftool +18 | 5.15.0-326.222.4.1.el9uek | ELSA-2026-500590, ELSA-2026-500588 |
Advisories 4
- WID-SEC-2026-4473 AMD Prozessor und AMD Radeon: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 11, 2026
- ELSA-2026-500587 Important: Unbreakable Enterprise kernel security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Nov 9, 2026
- ELSA-2026-500590 Important: Unbreakable Enterprise kernel security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Nov 9, 2026
- ELSA-2026-500588 Important: Unbreakable Enterprise kernel security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Nov 9, 2026