CVE-2025-39815
kernel: RISC-V: KVM: fix stack overrun when loading vlenb
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · September 16, 2025
Updated · October 30, 2026
Description
In the Linux kernel, the following vulnerability has been resolved:
RISC-V: KVM: fix stack overrun when loading vlenb
The userspace load can put up to 2048 bits into an xlen bit stack buffer. We want only xlen bits, so check the size beforehand.
Statement
This vulnerability does not affect Red Hat Enterprise Linux as the affected RISC-V virtualization code is not supported or present in shipped kernels. The flaw exists exclusively in the KVM implementation for RISC-V platforms when processing vector extension registers. Supported Red Hat hardware architectures are therefore not exposed to this flaw.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE not specified