CVE-2023-53438: 
Linux Kernel vulnerability analysis and mitigation

CVE-2023-53438 is a vulnerability in the Linux kernel related to the handling of AMD Zen Instruction Fetch (IF) Poison errors. The vulnerability was published to the CVE List on September 18, 2025, and affects the x86/MCE (Machine Check Exception) handling mechanism (NVD).

The vulnerability stems from the Instruction Fetch (IF) units on AMD Zen-based systems not guaranteeing synchronous #MC delivery for poison consumption errors, resulting in MCGSTATUS[EIPV|RIPV] not being set. While the exact instruction pointer (rIP) is unknown during these errors, the microarchitecture ensures the exception is delivered within the same context. The Code Segment (CS) register remains valid during IF unit poison errors regardless of MCGSTATUS[EIPV|RIPV] values (NVD).

The vulnerability can lead to unnecessary kernel panics on data poison errors because the kernel incorrectly believes the poison consumption occurred in kernel context. This happens due to the severity grading function assuming IN_KERNEL context when the m->cs value is 0 (NVD).

The fix involves adding a quirk to save the CS register for poison consumption from the IF unit banks. This modification helps properly determine the context of the error. The vulnerability has been resolved in various Linux kernel versions, with fixes being implemented across different distributions (Debian).