CVE-2025-37996: KVM: arm64: Fix uninitialized memcache pointer in user_mem_abort()
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: Fix uninitialized memcache pointer in usermemabort()
Commit fce886a60207 ("KVM: arm64: Plumb the pKVM MMU in KVM") made the initialization of the local memcache variable in usermemabort() conditional, leaving a codepath where it is used uninitialized via kvmpgtablestage2map().
This can fail on any path that requires a stage-2 allocation without transition via a permission fault or dirty logging.
Fix this by making sure that memcache is always valid.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-37996?
CVE-2025-37996 has a mild severity level, primarily affecting the proper initialization of a memcache pointer.
How do I fix CVE-2025-37996?
To remediate CVE-2025-37996, update to the latest version of the Linux kernel where this issue has been resolved.
Who is affected by CVE-2025-37996?
CVE-2025-37996 affects systems running the vulnerable versions of the Linux kernel that implement KVM for arm64.
What component is impacted by CVE-2025-37996?
CVE-2025-37996 specifically impacts the KVM (Kernel-based Virtual Machine) implementation in the Linux kernel.
What is the nature of the vulnerability in CVE-2025-37996?
CVE-2025-37996 is related to the uninitialized memcache pointer in the user_mem_abort() function, which could lead to various issues in system behavior.