CVE-2025-54518: AMD Zen 2 Processors privilege escalation via CPU Opcode Cache corruption

CVE-2025-54518 · Severity: high · CVSS 7 · Published 2026-05-15

A vulnerability in certain AMD Zen 2 processors could allow a malicious user or a virtual machine to gain unauthorized control over the entire system. By exploiting a flaw in how the processor handles its internal instruction cache, an attacker can corrupt commands being executed by more secure parts of the system, such as the operating system kernel or a virtualization host. This could lead to a total compromise of data confidentiality and system integrity on affected hardware.

Technologies: Xen Project Xen. Vendors: Amd, Xen Project.

Quick answers

Is CVE-2025-54518 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2025-54518 being exploited in the wild.
How severe is CVE-2025-54518?
High severity, with a CVSS score of 7, published 15 May 2026.
Which products and versions are affected?
Xen Project Xen 4.17, 4.18, 4.21, All versions including 4.17.x, 4.18.x, 4.21.x.
Is there a fix for CVE-2025-54518?
A patch was published on 2026-05-12: Xen patches released for multiple versions Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2025-54518 attacked?
It is attacked with local access, in device firmware.
Am I affected by CVE-2025-54518?
Check whether you run Amd EPYC 7002 Series Processors, Amd Ryzen 3000 Series Desktop Processors, Amd Ryzen 4000 Series Mobile Processors with Radeon Graphics or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

This vulnerability (CWE-1189) stems from improper isolation of shared resources within the CPU operation (opcode) cache on AMD Zen 2 (Family 17h) microarchitectures. A local attacker with low privileges can exploit this flaw to corrupt instructions being executed at higher privilege levels. In virtualized environments, such as those running the Xen hypervisor, this can facilitate guest-to-host escapes or userspace-to-kernel privilege escalation. The attack requires local access and is characterized by high complexity due to the nature of CPU cache timing and instruction corruption. AMD has released microcode updates, and Xen has provided patches for versions 4.17 through 4.21 to mitigate the issue.

Affected products

  • AMD EPYC 7002 Series Processors
  • AMD Ryzen 3000 Series Desktop Processors
  • AMD Ryzen 4000 Series Mobile Processors with Radeon Graphics
  • AMD Ryzen 5000 Series Mobile Processors with Radeon Graphics
  • AMD Ryzen 7020 Series Processors with Radeon Graphics
  • AMD Ryzen 7030 Series Mobile Processors with Radeon Graphics
  • AMD Ryzen Threadripper PRO 3000 WX-Series Processors
  • Xen Project Xen 4.17, 4.18, 4.21

Timeline

  • 2026-05-12: disclosed: Xen Project released advisory XSA-490
  • 2026-05-15: advisory: NVD published CVE-2025-54518
  • 2026-05-12: patched: Xen patches released for multiple versions

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.