CVE-2025-40102

KVM: arm64: Prevent access to vCPU events before init

References

Notes

 carnil> Introduced in b7b27facc7b5 ("arm/arm64: KVM: Add KVM_GET/SET_VCPU_EVENTS").
 carnil> Vulnerable versions: 4.19.

Bugs

Status

Branch Status
upstream released (6.18-rc2) [0aa1b76fe1429629215a7c79820e4b96233ac4a3]
7.2-upstream-stable N/A "Fixed before branching point"
7.1-upstream-stable N/A "Fixed before branching point"
7.0-upstream-stable N/A "Fixed before branching point"
6.19-upstream-stable N/A "Fixed before branching point"
6.18-upstream-stable N/A "Fixed before branching point"
6.17-upstream-stable released (6.17.5) [64a04e6320fc5affbadc59dc7024d79f909bfe84]
6.12-upstream-stable released (6.12.108) [c0fcd72e7eb50205dc20731033b0b1c67ecbe4dc]
6.6-upstream-stable released (6.6.156) [7b854e68365a84dfa984ee81268e10b9311ac9d2]
6.1-upstream-stable released (6.1.187) [b498f0da45a388b40195f7198455c62fe366a372]
5.10-upstream-stable released (5.10.269) [b0ab34a9e4cd5b88b522cc156e792cefe3085334]
sid released (6.17.6-1)
6.12-trixie-security needed
6.1-bookworm-security released (6.1.187-1)
5.10-bullseye-security needed