CVE Database›Document archive›CVE-2025-39815

CVE-2025-39815

kernel: RISC-V: KVM: fix stack overrun when loading vlenb

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · September 16, 2025

Updated · October 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

RISC-V: KVM: fix stack overrun when loading vlenb

The userspace load can put up to 2048 bits into an xlen bit stack buffer. We want only xlen bits, so check the size beforehand.

Statement

This vulnerability does not affect Red Hat Enterprise Linux as the affected RISC-V virtualization code is not supported or present in shipped kernels. The flaw exists exclusively in the KVM implementation for RISC-V platforms when processing vector extension registers. Supported Red Hat hardware architectures are therefore not exposed to this flaw.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE not specified