CVE-2025-54518: Xen Security Advisory 490 v1 (CVE-2025-54518) - x86: CPU Opcode Cache corruption
AMD: CVE-2025-54518 CPU OP Cache Corruption
Other sources
Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a different privilege level, potentially resulting in privilege escalation.
— MITRE
This vulnerability was found and addressed by AMD. We are documenting it in the Security Update Guide to encourage customers to install the May 2026 version of Windows as soon as possible. The vulnerability assigned to this CVE is in certain processor models offered by AMD. The mitigation for this vulnerability requires a Windows update. This CVE is being documented in the Security Update Guide to announce that the latest builds of Windows enable the mitigation and provide protection against the vulnerability. Please see the following for more information:
AMD-SB-7052
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch AMD-SB-7052 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch Xen Security Advisory 490 v1 (CVE-2025-54518) - x86: CPU Opcode Cache corruption - Compensating control
Apply the required Windows update mitigation by installing the May 2026 version of Windows as soon as possible.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-54518?
CVE-2025-54518 has been classified as a high-severity vulnerability due to its potential impact on system integrity.
How do I fix CVE-2025-54518?
To fix CVE-2025-54518, users should install the latest patches provided in the May 2026 version of Windows.
Which systems are affected by CVE-2025-54518?
CVE-2025-54518 affects various versions of Microsoft Windows, including Windows 10, Windows 11, and Windows Server variants.
What are the main vulnerabilities associated with CVE-2025-54518?
CVE-2025-54518 involves CPU opcode cache corruption vulnerabilities found in AMD processors.
Is there a patch available for CVE-2025-54518?
Yes, patches are available through specific Microsoft update identifiers for affected Windows versions.