CVE-2025-37996

Description

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix uninitialized memcache pointer in user_mem_abort() Commit fce886a60207 ("KVM: arm64: Plumb the pKVM MMU in KVM") made the initialization of the local memcache variable in user_mem_abort() conditional, leaving a codepath where it is used uninitialized via kvm_pgtable_stage2_map(). This can fail on any path that requires a stage-2 allocation without transition via a permission fault or dirty logging. Fix this by making sure that memcache is always valid.

Reserved 2025-04-16 | Published 2025-05-29 | Updated 2025-05-29 | Assigner Linux

Product status

Default status
unaffected

fce886a6020734d6253c2c5a3bc285e385cc5496 before a26d50f8a4a5049e956984797b5d0dedea4bbb18
affected

fce886a6020734d6253c2c5a3bc285e385cc5496 before 157dbc4a321f5bb6f8b6c724d12ba720a90f1a7c
affected

Default status
affected

6.14
affected

Any version before 6.14
unaffected

6.14.7
unaffected

6.15
unaffected

References

git.kernel.org/...c/a26d50f8a4a5049e956984797b5d0dedea4bbb18

git.kernel.org/...c/157dbc4a321f5bb6f8b6c724d12ba720a90f1a7c

cve.org (CVE-2025-37996)

nvd.nist.gov (CVE-2025-37996)

Download JSON