In the Linux kernel, the following vulnerability has been resolved:
arm64/sme: Always exit sme_alloc() early with existing storage
When sme_alloc() is called with existing storage and we are not flushing we will always allocate new storage, both leaking the existing storage and corrupting the state. Fix this by separating the checks for flushing and for existing storage as we do for SVE.
Callers that reallocate (eg, due to changing the vector length) should call sme_free() themselves.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | May 15, 2025 | Mar 11, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Dec 5, 2024 | Mar 11, 2024 |
| Suse | — | Upgrade kernel-develUpgrade kernel-symsUpgrade kernel-sourceUpgrade kernel-default-vdsoUpgrade kernel-default-extraUpgrade kernel-kvmsmallUpgrade kernel-macrosUpgrade kernel-zfcpdumpUpgrade kernel-syms-azureUpgrade kernel-azure-extraUpgrade kernel-64kb-develUpgrade kernel-devel-azureUpgrade kernel-64kbUpgrade kernel-default-develUpgrade reiserfs-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-develUpgrade kernel-docsUpgrade kernel-azureUpgrade kernel-source-vanillaUpgrade kernel-defaultUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-obs-buildUpgrade kernel-docs-htmlUpgrade kernel-64kb-extraUpgrade kernel-azure-devel | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-image-kvmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.5.0-1015-starfiveUpgrade linux-image-generic-64kUpgrade linux-image-genericUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.5.0-41-generic-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-6.5.0-41-lowlatency-64kUpgrade linux-image-6.5.0-1021-nvidia-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.5.0-1022-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-6.5.0-1017-laptopUpgrade linux-image-oem-22.04bUpgrade linux-image-6.5.0-41-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-6.5.0-1022-azureUpgrade linux-image-oracleUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.5.0-1021-awsUpgrade linux-image-6.5.0-1024-oracleUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-raspiUpgrade linux-image-nvidia-6.5Upgrade linux-image-azureUpgrade linux-image-6.5.0-1024-oracle-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04Upgrade linux-image-6.5.0-1024-oemUpgrade linux-image-6.5.0-41-genericUpgrade linux-image-6.5.0-1022-azure-fdeUpgrade linux-image-azure-fdeUpgrade linux-image-laptop-23.10Upgrade linux-image-oem-22.04dUpgrade linux-image-6.5.0-1021-nvidiaUpgrade linux-image-raspi-nolpaeUpgrade linux-image-starfiveUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-6.5.0-1018-raspiUpgrade linux-image-awsUpgrade linux-image-lowlatency-64k | May 17, 2024 | Mar 11, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | Feb 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub