Review reviewHigh

CVE-2025-68313

Linux

In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Add RDSEED fix for Zen5 There's an issue with RDSEED's 16-bit and 32-bit register output variants on Zen5 which return a random value of 0 "at a rate inconsistent with randomness while incorrectly signaling success (CF=1)". Search the web for AMD-SB-7055 for more detail. Add a fix glue which checks microcode revisions. [ bp: Add microcode revisions checking, rewrite. ]

CVSS: 7.1
EPSS: 0.12%
CISA KEV: Not listed
Published: 2025.12.17

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability0.12%

Technical severityCVSS 7.1

Vulnerability overview

Affected product and versions

Product: Linux
Affected versions: >= 3e4147f33f8b647775357bae0248b9a2aeebfcd2 < e980de2ff109dacb6d9d3a77f01b27c467115ecb, >= 3e4147f33f8b647775357bae0248b9a2aeebfcd2 < 36ff93e66d0efc46e39fab536a9feec968daa766, >= 3e4147f33f8b647775357bae0248b9a2aeebfcd2 < 607b9fb2ce248cc5b633c5949e0153838992c152, >= 6.8
Fixed versions: No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that Linux and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CWE: Not available