CVE-2025-37751

In the Linux kernel, the following vulnerability has been resolved:

x86/cpu: Avoid running off the end of an AMD erratum table

The NULL array terminator at the end of erratum_1386_microcode was removed during the switch from x86_cpu_desc to x86_cpu_id. This causes readers to run off the end of the array.

Replace the NULL.

This vulnerability is rated as Moderate impact because exploitation is constrained to local environments with specific AMD hardware configurations and cannot be triggered over the network. An out-of-bounds read during the kernel's CPU erratum table lookup may lead to a denial of service through a system crash or potentially expose uninitialized kernel memory, but does not directly permit arbitrary code execution. Furthermore, the issue only impacts environments running kernel builds that incorporate the modernized x86 CPU descriptor table structure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.