CVE-2025-38469: KVM: x86/xen: Fix cleanup logic in emulation of Xen schedop poll hypercalls
In the Linux kernel, the following vulnerability has been resolved:
KVM: x86/xen: Fix cleanup logic in emulation of Xen schedop poll hypercalls
kvmxenschedoppoll does a kmallocarray() when a VM polls the host for more than one event channel potr (nrports > 1).
After the kmallocarray(), the error paths need to go through the "out" label, but the call to kvmreadguestvirt() does not.
[Adjusted commit message. - Paolo]
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38469?
CVE-2025-38469 is considered a medium-severity vulnerability in the Linux kernel affecting KVM and Xen.
How do I fix CVE-2025-38469?
To fix CVE-2025-38469, update your Linux kernel to the latest stable version that includes the fix.
Who is affected by CVE-2025-38469?
CVE-2025-38469 affects users running vulnerable versions of the Linux kernel with KVM configured.
What kind of attack can exploit CVE-2025-38469?
CVE-2025-38469 can potentially be exploited for Denial of Service attacks against virtual machines.
Is there a workaround for CVE-2025-38469 before patching?
Currently, there are no known workarounds for CVE-2025-38469; patching is the recommended action.