CVE-2025-62626: CWE-333 Improper Handling of Insufficient Entropy in TRNG in AMD AMD Ryzen™ 9000HX Series Processors
A vulnerability (CVE-2025-62626) has been identified in the RDSEED instruction of AMD Ryzen 9000HX Series processors (Zen 5, Turin). The 16- and 32-bit versions of RDSEED can silently fail under certain system load conditions, potentially compromising random number generation in applications that rely on these versions. The 64-bit RDSEED instruction is unaffected and considered safe. AMD is investigating the issue, and the 64-bit Linux kernel uses the safe 64-bit RDSEED, so typical system random number generation via /dev/[u]random is not impacted.
AI Analysis
Technical Summary
This vulnerability affects the RDSEED instruction in AMD Zen 5 processors, specifically the 16- and 32-bit variants, which can silently fail under certain system load conditions. RDSEED is used for cryptographic random number generation. The silent failure could compromise applications that synthesize random numbers using these vulnerable instruction variants. The 64-bit RDSEED instruction remains secure and is used by the 64-bit Linux kernel to feed /dev/[u]random, thus not impacting standard system random number generation. AMD is currently investigating the vulnerability. No patch or official fix has been announced yet.
Potential Impact
Applications relying on the 16- and 32-bit RDSEED instructions for cryptographic random number generation may receive insufficient entropy, potentially weakening cryptographic operations. However, systems using the 64-bit RDSEED instruction, including the 64-bit Linux kernel's random number generation, are not affected. This limits the impact primarily to custom or legacy applications using the vulnerable instruction sizes.
Mitigation Recommendations
AMD is investigating the vulnerability and has not released a patch or official fix at this time. Users should avoid using the 16- and 32-bit RDSEED instructions for cryptographic purposes and instead use the 64-bit RDSEED instruction, which is not affected. Systems relying on the 64-bit Linux kernel random number generation are not impacted and require no action. Monitor AMD advisories for updates on remediation.
CVE-2025-62626: CWE-333 Improper Handling of Insufficient Entropy in TRNG in AMD AMD Ryzen™ 9000HX Series Processors
Description
A vulnerability (CVE-2025-62626) has been identified in the RDSEED instruction of AMD Ryzen 9000HX Series processors (Zen 5, Turin). The 16- and 32-bit versions of RDSEED can silently fail under certain system load conditions, potentially compromising random number generation in applications that rely on these versions. The 64-bit RDSEED instruction is unaffected and considered safe. AMD is investigating the issue, and the 64-bit Linux kernel uses the safe 64-bit RDSEED, so typical system random number generation via /dev/[u]random is not impacted.
CVSS v4.0
Score 7.2high
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability affects the RDSEED instruction in AMD Zen 5 processors, specifically the 16- and 32-bit variants, which can silently fail under certain system load conditions. RDSEED is used for cryptographic random number generation. The silent failure could compromise applications that synthesize random numbers using these vulnerable instruction variants. The 64-bit RDSEED instruction remains secure and is used by the 64-bit Linux kernel to feed /dev/[u]random, thus not impacting standard system random number generation. AMD is currently investigating the vulnerability. No patch or official fix has been announced yet.
Potential Impact
Applications relying on the 16- and 32-bit RDSEED instructions for cryptographic random number generation may receive insufficient entropy, potentially weakening cryptographic operations. However, systems using the 64-bit RDSEED instruction, including the 64-bit Linux kernel's random number generation, are not affected. This limits the impact primarily to custom or legacy applications using the vulnerable instruction sizes.
Mitigation Recommendations
AMD is investigating the vulnerability and has not released a patch or official fix at this time. Users should avoid using the 16- and 32-bit RDSEED instructions for cryptographic purposes and instead use the 64-bit RDSEED instruction, which is not affected. Systems relying on the 64-bit Linux kernel random number generation are not impacted and require no action. Monitor AMD advisories for updates on remediation.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- AMD
- Date Reserved
- 2025-10-16T20:46:13.455Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6920b65f6ec873750a9f2a43
Added to database: 11/21/2025, 18:58:39 UTC
Last enriched: 08/04/2026, 13:26:51 UTC
Last updated: 08/05/2026, 00:41:10 UTC
Views: 178
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.