What’s Vulnerable › Vulnerabilities

CVE-2026-46174: x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-05-28 · updated 2026-10-19
• Weakness: CWE-862

Description

In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache Make sure resources are not improperly shared in the op cache and cause instruction corruption this way.

Affected products

• Linux kernel: from 3.16.58 before 3.17; from 4.4.144 before 4.5; from 4.9.102 before 4.10; from 4.14.1 before 5.10.256; from 5.11 before 5.15.207; from 5.16 before 6.1.173 — fixed in 3.17, 4.10, 4.5, 5.10.256, 5.15.207, 6.1.173

How to fix

Upgrade to a fixed version: Linux kernel 3.17, 4.10, 4.5, 5.10.256. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/1cd85a19748b2407830376a5cbae5c0f126016e5
• https://git.kernel.org/stable/c/1e23b30a80b14e5764657401ee2cca030525ae8e
• https://git.kernel.org/stable/c/251497955f2314cd39d43191e81c6151dead4c7b
• https://git.kernel.org/stable/c/28f5ed477eef166d678d6966762cbc1de9b4f436
• https://git.kernel.org/stable/c/9109489cc8c34e50d15575a3d1ff82af586bc1aa
• https://git.kernel.org/stable/c/c21b90f77687075115d989e53a8ec5e2bb427ab1
• https://git.kernel.org/stable/c/f5bc3aef7df46eaaf423d7413ab8833f704ae576
• https://git.kernel.org/stable/c/ff6fc65b3bf73acc5ee71919154d830ad5431362
• https://cert-portal.siemens.com/productcert/html/ssa-019113.html
• https://cert-portal.siemens.com/productcert/html/ssa-082556.html
• https://cert-portal.siemens.com/productcert/html/ssa-457936.html

Get alerted when CVE-2026-46174 or the next vulnerability affects your stack