In the Linux kernel, the following vulnerability has been resolved:
arm64: mops: Do not dereference src reg for a set operation
The source register is not used for SET* and reading it can result in a UBSAN out-of-bounds array access error, specifically when the MOPS exception is taken from a SET* sequence with XZR (reg 31) as the source. Architecturally this is the only case where a src/dst/size field in the ESR can be reported as 31.
Prior to 2de451a329cf662b the code in do_el0_mops() was benign as the use of pt_regs_read_reg() prevented the out-of-bounds access.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade perf6.12Upgrade kernel6.12Upgrade kernel-libbpf-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-modules-extraUpgrade bpftoolUpgrade kernel-libbpf-develUpgrade perf6.12-debuginfoUpgrade kernel-headersUpgrade python3-perf6.12-debuginfoUpgrade kernel-develUpgrade kernel-modules-extra-commonUpgrade kernel6.12-debuginfoUpgrade kernel-livepatch-6.12.25-32.101Upgrade kernel-libbpf-staticUpgrade kernel-tools-develUpgrade python3-perf6.12Upgrade kernel6.12-debuginfo-common-x86_64 | Aug 5, 2025 | May 9, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 9, 2025 |
| Suse | — | Upgrade kernel-azure-vdsoUpgrade kernel-default-livepatchUpgrade kernel-source-vanillaUpgrade kernel-docs-htmlUpgrade kernel-macrosUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmallUpgrade kernel-sourceUpgrade kernel-preemptUpgrade kernel-source-azureUpgrade kernel-azureUpgrade kernel-obs-qaUpgrade kernel-default-extraUpgrade kernel-devel-azureUpgrade kernel-azure-develUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-develUpgrade kernel-preempt-develUpgrade kernel-64kb-extraUpgrade kernel-64kbUpgrade kernel-develUpgrade kernel-defaultUpgrade kernel-default-vdsoUpgrade kernel-azure-extraUpgrade kernel-docsUpgrade kernel-default-develUpgrade kernel-default-baseUpgrade kernel-64kb-develUpgrade kernel-symsUpgrade reiserfs-kmp-defaultUpgrade kernel-zfcpdump | Dec 5, 2025 | Jun 17, 2025 |
| Ubuntu | — | Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-genericUpgrade linux-image-ibm-classicUpgrade linux-image-aws-lts-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatencyUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-gke-64kUpgrade linux-image-ibmUpgrade linux-image-aws-64k-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-raspi-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-azure-fdeUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-gcp-64kUpgrade linux-image-gkeopUpgrade linux-image-xilinx-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-gke-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-oracle-6.8Upgrade linux-image-6.14.0-1007-awsUpgrade linux-image-nvidia-64kUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-oem-22.04dUpgrade linux-image-lowlatency-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-raspiUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.14.0-1007-azureUpgrade linux-image-azureUpgrade linux-image-realtime-6.8.1Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-xilinxUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-fips-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-fipsUpgrade linux-image-oracleUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-generic-6.8Upgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-realtimeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-kvmUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-raspi-realtimeUpgrade linux-image-gkeUpgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-nvidia-lowlatency-64k | Jun 26, 2025 | May 9, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub