Threats tagged 'ghsa-vp9x-33x6-jvvm'

CVE-2025-21991 is a high-severity vulnerability in the Linux kernel affecting AMD microcode loading on systems with CPU-less NUMA nodes. The flaw involves out-of-bounds access when iterating over NUMA nodes that lack CPUs, potentially causing memory corruption during microcode updates. This issue arises because the code assumes every NUMA node has at least one CPU, which is not true for CPU-less nodes. The vulnerability has no direct security impact since microcode flashing requires privileged access, but it can affect system reliability.