In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: Fix uninitialized memcache pointer in user_mem_abort()
Commit fce886a60207 ("KVM: arm64: Plumb the pKVM MMU in KVM") made the initialization of the local memcache variable in user_mem_abort() conditional, leaving a codepath where it is used uninitialized via kvm_pgtable_stage2_map().
This can fail on any path that requires a stage-2 allocation without transition via a permission fault or dirty logging.
Fix this by making sure that memcache is always valid.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-defaultUpgrade kernel-default-extraUpgrade kernel-obs-qaUpgrade kernel-64kb-extraUpgrade kernel-azure-vdsoUpgrade kernel-docsUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-macrosUpgrade kernel-docs-htmlUpgrade kernel-source-vanillaUpgrade kernel-default-livepatchUpgrade kernel-zfcpdumpUpgrade kernel-default-develUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade kernel-azure-develUpgrade kernel-kvmsmall-develUpgrade kernel-develUpgrade kernel-64kbUpgrade kernel-symsUpgrade kernel-64kb-develUpgrade kernel-default-vdsoUpgrade kernel-devel-azureUpgrade kernel-kvmsmallUpgrade kernel-azure | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-image-generic-64kUpgrade linux-image-6.14.0-1014-gcp-64kUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-genericUpgrade linux-image-azure-6.14Upgrade linux-image-oem-24.04Upgrade linux-image-aws-64kUpgrade linux-image-6.14.0-1011-oracle-64kUpgrade linux-image-6.14.0-1012-raspiUpgrade linux-image-6.14.0-1010-oemUpgrade linux-image-6.14.0-1011-awsUpgrade linux-image-raspiUpgrade linux-image-6.14.0-1010-realtimeUpgrade linux-image-azureUpgrade linux-image-6.14.0-28-genericUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.14.0-1011-oracleUpgrade linux-image-raspi-6.14Upgrade linux-image-oem-6.14Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-oem-24.04aUpgrade linux-image-aws-64k-6.14Upgrade linux-image-realtime-6.14Upgrade linux-image-6.14.0-1011-aws-64kUpgrade linux-image-oem-24.04cUpgrade linux-image-6.14.0-28-generic-64kUpgrade linux-image-generic-6.14Upgrade linux-image-6.14.0-1010-azureUpgrade linux-image-virtual-6.14Upgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-oracle-6.14Upgrade linux-image-virtualUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-gcp-64kUpgrade linux-image-generic-64k-6.14Upgrade linux-image-gcpUpgrade linux-image-6.14.0-1014-gcpUpgrade linux-image-aws-6.14Upgrade linux-image-gcp-6.14Upgrade linux-image-realtime | Jun 26, 2025 | May 29, 2025 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub