CVE-2023-53438: x86/MCE: Always save CS register on AMD Zen IF Poison errors

Published Sep 18, 2025
·
Updated

In the Linux kernel, the following vulnerability has been resolved:

x86/MCE: Always save CS register on AMD Zen IF Poison errors

The Instruction Fetch (IF) units on current AMD Zen-based systems do not guarantee a synchronous #MC is delivered for poison consumption errors. Therefore, MCGSTATUS[EIPV|RIPV] will not be set. However, the microarchitecture does guarantee that the exception is delivered within the same context. In other words, the exact rIP is not known, but the context is known to not have changed.

There is no architecturally-defined method to determine this behavior.

The Code Segment (CS) register is always valid on such IF unit poison errors regardless of the value of MCGSTATUS[EIPV|RIPV].

Add a quirk to save the CS register for poison consumption from the IF unit banks.

This is needed to properly determine the context of the error. Otherwise, the severity grading function will assume the context is INKERNEL due to the m->cs value being 0 (the initialized value). This leads to unnecessary kernel panics on data poison errors due to the kernel believing the poison consumption occurred in kernel context.

Affected Software

5 affected components
Linux Linux kernel
Microsoft cbl2 kernel 5.15.186.1-1
Linux Linux kernel<6.1.53
Linux Linux kernel>=6.2<6.4.16
Linux Linux kernel>=6.5<6.5.3

Event History

Sep 18, 2025
CVE Published
via MITRE·04:04 PM
Data Sourced
via MITRE·04:04 PM
Description
Data Sourced
via NVD·04:15 PM
RemedyDescriptionSeverityAffected Software
Dec 12, 2025
Data Sourced
via Microsoft·01:02 AM
DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

1

What is the severity of CVE-2023-53438?

CVE-2023-53438 has been classified with a severity that may vary based on the system's vulnerability context.

2

How does CVE-2023-53438 impact Linux kernel security?

CVE-2023-53438 potentially allows for the mishandling of poison consumption errors, affecting system stability and security.

3

What versions of the Linux kernel are affected by CVE-2023-53438?

CVE-2023-53438 affects specific AMD Zen-based systems running the Linux kernel where the vulnerability exists.

4

How do I fix CVE-2023-53438?

To fix CVE-2023-53438, ensure that you update your Linux kernel to the latest patched version that resolves this vulnerability.

5

What is the recommended response to CVE-2023-53438?

It is recommended to apply the latest kernel updates promptly to mitigate the risks associated with CVE-2023-53438.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203