In the Linux kernel, the following vulnerability has been resolved:
riscv: kvm: Fix out-of-bounds array access
In kvm_riscv_vcpu_sbi_init() the entry->ext_idx can contain an out-of-bound index. This is used as a special marker for the base extensions, that cannot be disabled. However, when traversing the extensions, that special marker is not checked prior indexing the array.
Add an out-of-bounds check to the function.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Ubuntu | — | Upgrade linux-image-oem-24.04aUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-6.8.0-1027-azureUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-genericUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-gkeUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.11.0-1015-oemUpgrade linux-image-oracleUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-oem-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-nvidiaUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-generic-64kUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-nvidia-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-nvidia-64kUpgrade linux-image-kvmUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcp-64kUpgrade linux-image-ibmUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-azure-fdeUpgrade linux-image-ibm-classicUpgrade linux-image-raspiUpgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-azureUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-oem-22.04bUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-awsUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-azure-nvidiaUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-oem-22.04aUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-nvidia-lowlatency-64k | Feb 20, 2025 | Dec 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub