CVE-2026-72325

A flaw was found in the Linux kernel's performance monitoring unit (PMU) for AMD processors. When Secure Virtual Machine (SVM) is toggled on a CPU with active Last Branch Record (LBR) events, the system incorrectly attempts to enable Branch Sampling (BRS) on hardware that does not support it. This misconfiguration leads to a General Protection Fault, which can cause the system to crash, resulting in a Denial of Service (DoS).

This flaw is evaluated as having Moderate impact because exploitation requires local access and is constrained to specific AMD hardware configurations where virtualization transitions trigger an unhandled processor fault, resulting solely in a denial of service without compromising system confidentiality or integrity. In standard Red Hat Enterprise Linux deployments, the issue only manifests on AMD processors supporting Last Branch Record (LBR) but lacking Branch Sampling (BRS) when host performance profiling coincides with Secure Virtual Machine (SVM) state changes. Because the defect cannot be triggered remotely, does not enable privilege escalation, and requires concurrent local profiling sessions alongside hypervisor operations, the overall risk to production environments is limited.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.