CVE-2025-54505

NameCVE-2025-54505
SourceCVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
linux (PTS)bullseye5.10.223-1vulnerable
bullseye (security)5.10.251-1vulnerable
bookworm6.1.159-1vulnerable
bookworm (security)6.1.164-1vulnerable
trixie6.12.73-1vulnerable
trixie (security)6.12.74-2vulnerable
forky6.19.11-1vulnerable
sid6.19.12-1vulnerable
xen (PTS)bullseye4.14.6-1vulnerable
bullseye (security)4.14.5+94-ge49571868d-1vulnerable
bookworm, bookworm (security)4.17.5+72-g01140da4e8-1vulnerable
trixie4.20.2+37-g61ff35323e-0+deb13u1vulnerable
trixie (security)4.20.2+7-g1badcf5035-0+deb13u1vulnerable
forky, sid4.20.2+37-g61ff35323e-1vulnerable

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
linuxsource(unstable)(unfixed)
xensource(unstable)(unfixed)

Notes

AMD CPU HW issue:
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7053.html
https://roots.ec/blog/fpdss/
Mitigation in src:xen and src:linux:
https://xenbits.xen.org/xsa/advisory-488.html
https://git.kernel.org/linus/e55d98e7756135f32150b9b8f75d580d0d4b2dd3

Search for package or bug name: Reporting problems