CVE-2025-37751

x86/cpu: Avoid running off the end of an AMD erratum table

Description

In the Linux kernel, the following vulnerability has been resolved: x86/cpu: Avoid running off the end of an AMD erratum table The NULL array terminator at the end of erratum_1386_microcode was removed during the switch from x86_cpu_desc to x86_cpu_id. This causes readers to run off the end of the array. Replace the NULL.

N/A

CVSS

Severity:

EPSS 0.03%

Affected: Linux Linux

References

Link	Tags
https://git.kernel.org/stable/c/1b518f73f1b6f59e083ec33dea22d9a1a275a970
https://git.kernel.org/stable/c/f0df00ebc57f803603f2a2e0df197e51f06fbe90

Frequently Asked Questions

What is the severity of CVE-2025-37751?: CVE-2025-37751 has not yet been assigned a CVSS score.
How to fix CVE-2025-37751?: To fix CVE-2025-37751, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2025-37751 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2025-37751 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2025-37751?: CVE-2025-37751 affects Linux Linux, Linux Linux.

This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.