AMD to fix buggy RNG endangering cryptographic security • The Register

AMD will issue a microcode patch for a high-severity vulnerability that could weaken cryptographic keys across Epyc and Ryzen CPUs.

The flaw, tracked as CVE-2025-62626 (7.2), affects Zen 5 chips running on 16-bit and 32-bit architectures. The bug involves RDSEED, a function that generates high-quality random numbers used by security keys.

RDSEED provides the true entropy that's required by apps generating high-strength cryptographic keys.

An attacker with local privileges could manipulate the values returned by RDSEED, which in some cases return 0 instead of a random number, and treat it as an acceptable output. It means the cybercrim could theoretically target applications reliant upon the values returned by the RDSEED function and exploit the flaw to decrypt data or access credentials