Skip to main content
← All vulnerabilities
CVE-2026-31628

x86/CPU: Fix FPDSS on Zen1

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 3.17, 4.5, 4.10, 5.10.253, 5.15.203, and 6 more
None on Exploit-DB, Metasploit or GitHub

Summary

In the Linux kernel, the following vulnerability has been resolved: x86/CPU: Fix FPDSS on Zen1 Zen1's hardware divider can leave, under certain circumstances, partial results from previous operations. Those results can be leaked by another, attacker thread. Fix that with a chicken bit.

Timeline

  1. CVE published
  2. Record last updated

Affected versions

  • Linux Linux

    From f7f3dc00f61261cdc9ccd8b886f21bc4dffd6fd9 · fixed in ed7a3a246309ccc807238f1b4f159ee6d37ff9c4; From f7f3dc00f61261cdc9ccd8b886f21bc4dffd6fd9 · fixed in 0548529af20e68c6552817834b766646dd3bd7a7; From f7f3dc00f61261cdc9ccd8b886f21bc4dffd6fd9 · fixed in 1272cfedf4cd1019ddf583917a99b62f2d3645bb; From f7f3dc00f61261cdc9ccd8b886f21bc4dffd6fd9 · fixed in 91f02726b2203b71545713ecb7fb006e60a2d66f; From f7f3dc00f61261cdc9ccd8b886f21bc4dffd6fd9 · fixed in b731aca06387b195058a9f6449a03b62efa1bd10; From f7f3dc00f61261cdc9ccd8b886f21bc4dffd6fd9 · fixed in ad17f07e95e6e8505e2153e5b391f0d27eacce25; From f7f3dc00f61261cdc9ccd8b886f21bc4dffd6fd9 · fixed in e6af5286efe5a56128b34032572c9ce9ebeccda3; From f7f3dc00f61261cdc9ccd8b886f21bc4dffd6fd9 · fixed in 546785c719418c6166834a47e372a88f5f7ae893; From f7f3dc00f61261cdc9ccd8b886f21bc4dffd6fd9 · fixed in e55d98e7756135f32150b9b8f75d580d0d4b2dd3; From 3.16.58 · fixed in 3.17; From 4.4.144 · fixed in 4.5; From 4.9.102 · fixed in 4.10

  • Linux Linux

    4.14

  • KernelLinux

    From 4.14.0 · fixed in 5.10.253; From 5.11.0 · fixed in 5.15.203; From 5.16.0 · fixed in 6.1.169; From 6.2.0 · fixed in 6.6.135; From 6.7.0 · fixed in 6.12.82; From 6.13.0 · fixed in 6.18.23; From 6.19.0 · fixed in 6.19.13; From 6.20.0 · fixed in 7.0.1

References 9

git.kernel.org