Home

Description

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/xen: Fix cleanup logic in emulation of Xen schedop poll hypercalls kvm_xen_schedop_poll does a kmalloc_array() when a VM polls the host for more than one event channel potr (nr_ports > 1). After the kmalloc_array(), the error paths need to go through the "out" label, but the call to kvm_read_guest_virt() does not. [Adjusted commit message. - Paolo]

PUBLISHED Reserved 2025-04-16 | Published 2025-07-28 | Updated 2025-07-28 | Assigner Linux

Product status

Default status
unaffected

92c58965e9656dc6e682a8ffe520fac0fb256d13 (git) before 3ee59c38ae7369ad1f7b846e05633ccf0d159fab
affected

92c58965e9656dc6e682a8ffe520fac0fb256d13 (git) before fd627ac8a5cff4d45269f164b13ddddc0726f2cc
affected

92c58965e9656dc6e682a8ffe520fac0fb256d13 (git) before 061c553c66bc1638c280739999224c8000fd4602
affected

92c58965e9656dc6e682a8ffe520fac0fb256d13 (git) before 5a53249d149f48b558368c5338b9921b76a12f8c
affected

Default status
affected

6.2
affected

Any version before 6.2
unaffected

6.6.100 (semver)
unaffected

6.12.40 (semver)
unaffected

6.15.8 (semver)
unaffected

6.16 (original_commit_for_fix)
unaffected

References

git.kernel.org/...c/3ee59c38ae7369ad1f7b846e05633ccf0d159fab

git.kernel.org/...c/fd627ac8a5cff4d45269f164b13ddddc0726f2cc

git.kernel.org/...c/061c553c66bc1638c280739999224c8000fd4602

git.kernel.org/...c/5a53249d149f48b558368c5338b9921b76a12f8c

cve.org (CVE-2025-38469)

nvd.nist.gov (CVE-2025-38469)

Download JSON