In the Linux kernel, the following vulnerability has been resolved:
arm64: mops: Do not dereference src reg for a set operation
The source register is not used for SET* and reading it can result in a UBSAN out-of-bounds array access error, specifically when the MOPS exception is taken from a SET* sequence with XZR (reg 31) as the source. Architecturally this is the only case where a src/dst/size field in the ESR can be reported as 31.
Prior to 2de451a329cf662b the code in do_el0_mops() was benign as the use of pt_regs_read_reg() prevented the out-of-bounds access.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade bpftoolUpgrade perf6.12-debuginfoUpgrade kernel-libbpf-staticUpgrade python3-perf6.12-debuginfoUpgrade kernel-livepatch-6.12.25-32.101Upgrade kernel6.12-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-modules-extra-commonUpgrade kernel-headersUpgrade kernel-libbpf-develUpgrade python3-perf6.12Upgrade kernel-tools-develUpgrade kernel-libbpf-debuginfoUpgrade kernel6.12Upgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-modules-extraUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade perf6.12Upgrade kernel-tools-debuginfoUpgrade kernel-libbpf | Aug 5, 2025 | May 9, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 9, 2025 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-docs-htmlUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmallUpgrade kernel-macrosUpgrade kernel-source-vanillaUpgrade kernel-default-extraUpgrade kernel-sourceUpgrade kernel-devel-azureUpgrade kernel-obs-qaUpgrade kernel-default-livepatchUpgrade kernel-azureUpgrade kernel-azure-develUpgrade kernel-preemptUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-azureUpgrade kernel-default-baseUpgrade kernel-64kb-extraUpgrade kernel-default-vdsoUpgrade reiserfs-kmp-defaultUpgrade kernel-docsUpgrade kernel-default-develUpgrade kernel-develUpgrade kernel-preempt-develUpgrade kernel-zfcpdumpUpgrade kernel-defaultUpgrade kernel-symsUpgrade kernel-64kb-develUpgrade kernel-azure-extraUpgrade kernel-64kb | Dec 5, 2025 | Jun 17, 2025 |
| Ubuntu | — | Upgrade linux-image-6.14.0-1007-awsUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-gke-6.8Upgrade linux-image-nvidiaUpgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-aws-lts-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-realtime-6.8.1Upgrade linux-image-virtual-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-gkeopUpgrade linux-image-azureUpgrade linux-image-generic-64k-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gke-64kUpgrade linux-image-aws-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-22.04dUpgrade linux-image-gke-64k-6.8Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-azure-fipsUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-ibm-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-gcp-fipsUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-ibmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-xilinx-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-raspiUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-generic-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-xilinxUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-raspi-realtimeUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-aws-64kUpgrade linux-image-gkeUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-fipsUpgrade linux-image-oracle-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-oracleUpgrade linux-image-generic-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-fips-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-gcpUpgrade linux-image-kvmUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-realtimeUpgrade linux-image-lowlatency-hwe-22.04 | Jun 26, 2025 | May 9, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub