In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: Fix uninitialized memcache pointer in user_mem_abort()
Commit fce886a60207 ("KVM: arm64: Plumb the pKVM MMU in KVM") made the initialization of the local memcache variable in user_mem_abort() conditional, leaving a codepath where it is used uninitialized via kvm_pgtable_stage2_map().
This can fail on any path that requires a stage-2 allocation without transition via a permission fault or dirty logging.
Fix this by making sure that memcache is always valid.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-azure-extraUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-64kb-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-macrosUpgrade kernel-obs-qaUpgrade kernel-docs-htmlUpgrade kernel-azure-vdsoUpgrade kernel-source-azureUpgrade kernel-azure-develUpgrade kernel-devel-azureUpgrade kernel-azureUpgrade kernel-default-livepatchUpgrade kernel-symsUpgrade kernel-kvmsmall-develUpgrade kernel-64kbUpgrade kernel-develUpgrade kernel-default-develUpgrade kernel-source-vanillaUpgrade kernel-default-vdsoUpgrade kernel-64kb-develUpgrade kernel-zfcpdumpUpgrade kernel-sourceUpgrade kernel-kvmsmall | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-64k-6.14Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-realtime-6.14Upgrade linux-image-6.14.0-1014-gcpUpgrade linux-image-awsUpgrade linux-image-aws-64k-6.14Upgrade linux-image-6.14.0-1011-aws-64kUpgrade linux-image-aws-6.14Upgrade linux-image-gcp-6.14Upgrade linux-image-6.14.0-1010-azureUpgrade linux-image-oem-24.04aUpgrade linux-image-6.14.0-28-generic-64kUpgrade linux-image-oem-24.04cUpgrade linux-image-gcp-64kUpgrade linux-image-realtimeUpgrade linux-image-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-virtualUpgrade linux-image-virtual-6.14Upgrade linux-image-oracle-6.14Upgrade linux-image-generic-6.14Upgrade linux-image-aws-64kUpgrade linux-image-azureUpgrade linux-image-6.14.0-1010-oemUpgrade linux-image-6.14.0-28-genericUpgrade linux-image-oem-6.14Upgrade linux-image-6.14.0-1011-oracleUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-raspiUpgrade linux-image-6.14.0-1012-raspiUpgrade linux-image-oem-24.04Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-genericUpgrade linux-image-raspi-6.14Upgrade linux-image-generic-64kUpgrade linux-image-6.14.0-1011-oracle-64kUpgrade linux-image-6.14.0-1011-awsUpgrade linux-image-azure-6.14Upgrade linux-image-6.14.0-1014-gcp-64kUpgrade linux-image-6.14.0-1010-realtime | Jun 26, 2025 | May 29, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub