In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: Fix uninitialized memcache pointer in user_mem_abort()
Commit fce886a60207 ("KVM: arm64: Plumb the pKVM MMU in KVM") made the initialization of the local memcache variable in user_mem_abort() conditional, leaving a codepath where it is used uninitialized via kvm_pgtable_stage2_map().
This can fail on any path that requires a stage-2 allocation without transition via a permission fault or dirty logging.
Fix this by making sure that memcache is always valid.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-azure-vdsoUpgrade kernel-azure-extraUpgrade kernel-defaultUpgrade kernel-obs-qaUpgrade kernel-docsUpgrade kernel-macrosUpgrade kernel-64kb-extraUpgrade kernel-default-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-develUpgrade kernel-64kbUpgrade kernel-symsUpgrade kernel-default-develUpgrade kernel-azure-develUpgrade kernel-source-azureUpgrade kernel-default-livepatchUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmallUpgrade kernel-azureUpgrade kernel-default-vdsoUpgrade kernel-64kb-develUpgrade kernel-devel-azureUpgrade kernel-sourceUpgrade kernel-source-vanillaUpgrade kernel-devel | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-image-oem-24.04aUpgrade linux-image-awsUpgrade linux-image-gcpUpgrade linux-image-aws-64k-6.14Upgrade linux-image-generic-64k-6.14Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-oem-24.04cUpgrade linux-image-virtualUpgrade linux-image-oracle-64kUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-oracle-6.14Upgrade linux-image-virtual-6.14Upgrade linux-image-generic-6.14Upgrade linux-image-6.14.0-1010-azureUpgrade linux-image-gcp-64kUpgrade linux-image-gcp-6.14Upgrade linux-image-6.14.0-1011-aws-64kUpgrade linux-image-6.14.0-1014-gcpUpgrade linux-image-realtimeUpgrade linux-image-realtime-6.14Upgrade linux-image-aws-6.14Upgrade linux-image-6.14.0-28-generic-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.14.0-1011-oracleUpgrade linux-image-6.14.0-1010-oemUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-azureUpgrade linux-image-genericUpgrade linux-image-6.14.0-1011-awsUpgrade linux-image-6.14.0-1011-oracle-64kUpgrade linux-image-aws-64kUpgrade linux-image-azure-6.14Upgrade linux-image-6.14.0-1010-realtimeUpgrade linux-image-raspiUpgrade linux-image-6.14.0-1012-raspiUpgrade linux-image-generic-64kUpgrade linux-image-6.14.0-1014-gcp-64kUpgrade linux-image-raspi-6.14Upgrade linux-image-oem-6.14Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-6.14.0-28-generic | Jun 26, 2025 | May 29, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub