In the Linux kernel, the following vulnerability has been resolved:
arm64/sme: Always exit sme_alloc() early with existing storage
When sme_alloc() is called with existing storage and we are not flushing we will always allocate new storage, both leaking the existing storage and corrupting the state. Fix this by separating the checks for flushing and for existing storage as we do for SVE.
Callers that reallocate (eg, due to changing the vector length) should call sme_free() themselves.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | May 15, 2025 | Mar 11, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Dec 5, 2024 | Mar 11, 2024 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-develUpgrade kernel-syms-azureUpgrade kernel-symsUpgrade kernel-sourceUpgrade kernel-zfcpdumpUpgrade kernel-azure-extraUpgrade kernel-macrosUpgrade kernel-kvmsmall-develUpgrade kernel-obs-qaUpgrade kernel-default-develUpgrade reiserfs-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-64kb-develUpgrade kernel-devel-azureUpgrade kernel-default-vdsoUpgrade kernel-64kbUpgrade kernel-kvmsmallUpgrade kernel-docsUpgrade kernel-default-livepatchUpgrade kernel-azure-develUpgrade kernel-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-obs-buildUpgrade kernel-source-vanillaUpgrade kernel-64kb-extraUpgrade kernel-docs-htmlUpgrade kernel-azure-vdsoUpgrade kernel-azure | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.5.0-1015-starfiveUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-6.5.0-1022-azureUpgrade linux-image-kvmUpgrade linux-image-6.5.0-41-generic-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-6.5.0-1021-nvidia-64kUpgrade linux-image-6.5.0-1022-gcpUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.5.0-1017-laptopUpgrade linux-image-oem-22.04cUpgrade linux-image-6.5.0-41-lowlatency-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-64kUpgrade linux-image-virtualUpgrade linux-image-gcpUpgrade linux-image-6.5.0-41-lowlatencyUpgrade linux-image-6.5.0-41-genericUpgrade linux-image-laptop-23.10Upgrade linux-image-azure-fdeUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-generic-lpaeUpgrade linux-image-6.5.0-1022-azure-fdeUpgrade linux-image-lowlatencyUpgrade linux-image-6.5.0-1018-raspiUpgrade linux-image-6.5.0-1024-oracleUpgrade linux-image-oem-22.04dUpgrade linux-image-raspi-nolpaeUpgrade linux-image-starfiveUpgrade linux-image-6.5.0-1021-awsUpgrade linux-image-awsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04Upgrade linux-image-6.5.0-1024-oracle-64kUpgrade linux-image-nvidia-6.5Upgrade linux-image-6.5.0-1024-oemUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.5.0-1021-nvidiaUpgrade linux-image-raspi | May 17, 2024 | Mar 11, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | Feb 29, 2024 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub