CVE-2025-37996

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-37996

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

I

n the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix uninitialized memcache pointer in user_mem_abort() Commit fce886a60207 ("KVM: arm64: Plumb the pKVM MMU in KVM") made the initialization of the local memcache variable in user_mem_abort() conditional, leaving a codepath where it is used uninitialized via kvm_pgtable_stage2_map(). This can fail on any path that requires a stage-2 allocation without transition via a permission fault or dirty logging. Fix this by making sure that memcache is always valid.

References
Link Resource
https://git.kernel.org/stable/c/157dbc4a321f5bb6f8b6c724d12ba720a90f1a7c Patch
https://git.kernel.org/stable/c/a26d50f8a4a5049e956984797b5d0dedea4bbb18 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.15:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.15:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.15:rc5:*:*:*:*:*:*
History

14 Nov 2025, 16:58

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.15:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.15:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.15:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:*
First Time Linux linux Kernel
Linux
References () https://git.kernel.org/stable/c/157dbc4a321f5bb6f8b6c724d12ba720a90f1a7c - () https://git.kernel.org/stable/c/157dbc4a321f5bb6f8b6c724d12ba720a90f1a7c - Patch
References () https://git.kernel.org/stable/c/a26d50f8a4a5049e956984797b5d0dedea4bbb18 - () https://git.kernel.org/stable/c/a26d50f8a4a5049e956984797b5d0dedea4bbb18 - Patch
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: KVM: arm64: Corrección de un puntero de memcache no inicializado en user_mem_abort(). El commit fce886a60207 ("KVM: arm64: Conectar la MMU pKVM en KVM") hizo que la inicialización de la variable de memcache local en user_mem_abort() fuera condicional, dejando la ruta de código donde se usa sin inicializar mediante kvm_pgtable_stage2_map(). Esto puede fallar en cualquier ruta que requiera una asignación de etapa 2 sin transición debido a un fallo de permiso o un registro incorrecto. Para solucionar esto, asegúrese de que la memcache sea siempre válida.
CWE CWE-908
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

29 May 2025, 14:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-05-29 14:15

Updated : 2025-11-14 16:58

NVD link : CVE-2025-37996

Mitre link : CVE-2025-37996

CVE.ORG link : CVE-2025-37996

JSON object : View

Products Affected

linux

CWE
CWE-908

Use of Uninitialized Resource