Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2025-39815

RISC-V: KVM: fix stack overrun when loading vlenb

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: fix stack overrun when loading vlenb The userspace load can put up to 2048 bits into an xlen bit stack buffer. We want only xlen bits, so check the size beforehand.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 2fa290372dfe7dd248b1c16f943f273a3e674f22 to < c76bf8359188a11f8fd790e5bbd6077894a245ccaffected
  • 2fa290372dfe7dd248b1c16f943f273a3e674f22 to < 6d28659b692a0212f360f8bd8a58712b339f9aacaffected
  • 2fa290372dfe7dd248b1c16f943f273a3e674f22 to < 799766208f09f95677a9ab111b93872d414fbad7affected

Linux Linux

Default version status: affected

  • 6.8affected
  • 0 to < 6.8unaffected
  • 6.12.45 to ≤ 6.12.*unaffected
  • 6.16.5 to ≤ 6.16.*unaffected
  • 6.17 to ≤ *unaffected

References