CVE-2025-68743: mshv: Fix create memory region overlap check
In the Linux kernel, the following vulnerability has been resolved:
mshv: Fix create memory region overlap check
The current check is incorrect; it only checks if the beginning or end of a region is within an existing region. This doesn't account for userspace specifying a region that begins before and ends after an existing region.
Change the logic to a range intersection check against gfns and uaddrs for each region.
Remove mshvpartitionregionbyuaddr() as it is no longer used.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
mshv_partition_region_by_uaddr()from your environment.Remove mshv_partition_region_by_uaddr() because it is no longer used.
- Compensating control
Change the memory-region overlap logic to perform a range-intersection check against GFNs and UADDRs, including regions that begin before and end after an existing region.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-68743?
CVE-2025-68743 has a medium severity due to the potential for memory region overlap which could lead to data corruption.
How do I fix CVE-2025-68743?
To fix CVE-2025-68743, update to the latest version of the Linux kernel where this vulnerability has been patched.
What systems are affected by CVE-2025-68743?
CVE-2025-68743 affects various versions of the Linux kernel that implement the mshv functionalities.
What exploit types are associated with CVE-2025-68743?
CVE-2025-68743 may allow for privilege escalation via improper memory region checks.
What components are involved in CVE-2025-68743?
CVE-2025-68743 involves the memory management components of the Linux kernel related to memory region creation.