GPU VulnDB

Database/Control plane, storage & DevOps

Linux x86/MCE - CS register not saved on AMD Zen Instruction Fetch Poison errors: On AMD Zen systems, the Instruction

CVE-2023-53438Control plane, storage & DevOpscurated

Impact

On AMD Zen systems, the Instruction Fetch unit does not report the address of a poisoned (uncorrectable-error) instruction fetch, and the kernel was not saving the CS register either - so when memory corruption hits an instruction fetch, you lose the information needed to attribute it. On a GPU training fleet where uncorrectable memory errors are a routine operational event, losing attribution means you cannot tell which tenant's job hit the bad memory or which DIMM to replace.

Who can reach it

Not attacker-driven. This is an observability failure on the machine-check path.

What to do

Fixed in the Linux kernel. Distro kernel update plus reboot. Worth taking on any fleet where you do RAS-driven node retirement - without it your machine-check records are missing the field you need to act on.

References

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.