In the Linux kernel, the following vulnerability has been resolved:
arm64: mops: Do not dereference src reg for a set operation
The source register is not used for SET* and reading it can result in a UBSAN out-of-bounds array access error, specifically when the MOPS exception is taken from a SET* sequence with XZR (reg 31) as the source. Architecturally this is the only case where a src/dst/size field in the ESR can be reported as 31.
Prior to 2de451a329cf662b the code in do_el0_mops() was benign as the use of pt_regs_read_reg() prevented the out-of-bounds access.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade python3-perf6.12Upgrade kernel-headersUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-modules-extra-commonUpgrade kernel-libbpf-develUpgrade kernel-livepatch-6.12.25-32.101Upgrade kernel-tools-develUpgrade kernel-develUpgrade kernel6.12-debuginfoUpgrade kernel-libbpf-staticUpgrade bpftoolUpgrade perf6.12-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel-libbpfUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade perf6.12Upgrade kernel6.12Upgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-libbpf-debuginfo | Aug 5, 2025 | May 9, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 9, 2025 |
| Suse | — | Upgrade kernel-azure-extraUpgrade kernel-preempt-develUpgrade kernel-symsUpgrade kernel-64kb-develUpgrade kernel-64kb-extraUpgrade kernel-64kbUpgrade kernel-develUpgrade kernel-default-vdsoUpgrade kernel-default-develUpgrade kernel-docsUpgrade kernel-zfcpdumpUpgrade kernel-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-obs-qaUpgrade kernel-macrosUpgrade kernel-source-azureUpgrade kernel-kvmsmallUpgrade kernel-azure-vdsoUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-develUpgrade kernel-source-vanillaUpgrade kernel-sourceUpgrade kernel-default-livepatchUpgrade kernel-azure-develUpgrade kernel-devel-azureUpgrade kernel-azureUpgrade kernel-default-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-preemptUpgrade kernel-docs-html | Dec 5, 2025 | Jun 17, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-aws-fips-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-realtimeUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.14.0-22-genericUpgrade linux-image-generic-6.8Upgrade linux-image-awsUpgrade linux-image-azure-fips-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-kvmUpgrade linux-image-gkeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-azure-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-fips-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-fipsUpgrade linux-image-oem-22.04bUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-xilinxUpgrade linux-image-generic-lpaeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-intel-iotgUpgrade linux-image-aws-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-xilinx-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-azure-fdeUpgrade linux-image-generic-64kUpgrade linux-image-raspi-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-nvidiaUpgrade linux-image-gke-64k-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-ibmUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-22.04aUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-gkeopUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-genericUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-gkeop-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-azure-fipsUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-azureUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-oem-22.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-lowlatency-64kUpgrade linux-image-gke-64kUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-generic-64k-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-oem-22.04cUpgrade linux-image-azure-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-gke-6.8Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-6.14.0-1007-aws | Jun 26, 2025 | May 9, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub