Vulnerability in Linux

CVE-2025-40065

In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Write hgatp register with valid mode bits According to the RISC-V Privileged Architecture Spec, when MODE=Bare is selected,software must write zero to the remaining fields of hgatp. We have detected the valid mode supported by the HW before, So using a valid mode to detect how many vmid bits are supported.

EPSS: 0.002 (6.9th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions fd7bb4a251dfc1da3496bf59a4793937c13e8c1f, 5.16, 0

References