fkie_nvd - fkie_cve-2025-39815

fkie_cve-2025-39815

Vulnerability from fkie_nvd

Published

2025-09-16 13:15

Modified

2025-09-18 13:43

Severity ?

Summary

In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: fix stack overrun when loading vlenb The userspace load can put up to 2048 bits into an xlen bit stack buffer. We want only xlen bits, so check the size beforehand.

References

▼	URL	Tags
	416baaa9-dc9f-4396-8d5f-8c081fb06d67	https://git.kernel.org/stable/c/6d28659b692a0212f360f8bd8a58712b339f9aac
	416baaa9-dc9f-4396-8d5f-8c081fb06d67	https://git.kernel.org/stable/c/799766208f09f95677a9ab111b93872d414fbad7
	416baaa9-dc9f-4396-8d5f-8c081fb06d67	https://git.kernel.org/stable/c/c76bf8359188a11f8fd790e5bbd6077894a245cc

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nRISC-V: KVM: fix stack overrun when loading vlenb\n\nThe userspace load can put up to 2048 bits into an xlen bit stack\nbuffer.  We want only xlen bits, so check the size beforehand."
    }
  ],
  "id": "CVE-2025-39815",
  "lastModified": "2025-09-18T13:43:34.310",
  "metrics": {},
  "published": "2025-09-16T13:15:56.240",
  "references": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/6d28659b692a0212f360f8bd8a58712b339f9aac"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/799766208f09f95677a9ab111b93872d414fbad7"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/c76bf8359188a11f8fd790e5bbd6077894a245cc"
    }
  ],
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
  "vulnStatus": "Awaiting Analysis"
}

CVE-2025-39815 (GCVE-0-2025-39815)

Vulnerability from cvelistv5

Published

2025-09-16 13:00

Modified

2025-09-16 13:00

Severity ?

Summary

References

▼	URL	Tags
	https://git.kernel.org/stable/c/c76bf8359188a11f8fd790e5bbd6077894a245cc
	https://git.kernel.org/stable/c/6d28659b692a0212f360f8bd8a58712b339f9aac
	https://git.kernel.org/stable/c/799766208f09f95677a9ab111b93872d414fbad7

Impacted products

Vendor

Product

Version

▼

Linux

Version: 2fa290372dfe7dd248b1c16f943f273a3e674f22
Version: 2fa290372dfe7dd248b1c16f943f273a3e674f22
Version: 2fa290372dfe7dd248b1c16f943f273a3e674f22

Linux

Version: 6.8

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "arch/riscv/kvm/vcpu_vector.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "c76bf8359188a11f8fd790e5bbd6077894a245cc",
              "status": "affected",
              "version": "2fa290372dfe7dd248b1c16f943f273a3e674f22",
              "versionType": "git"
            },
            {
              "lessThan": "6d28659b692a0212f360f8bd8a58712b339f9aac",
              "status": "affected",
              "version": "2fa290372dfe7dd248b1c16f943f273a3e674f22",
              "versionType": "git"
            },
            {
              "lessThan": "799766208f09f95677a9ab111b93872d414fbad7",
              "status": "affected",
              "version": "2fa290372dfe7dd248b1c16f943f273a3e674f22",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "arch/riscv/kvm/vcpu_vector.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.8"
            },
            {
              "lessThan": "6.8",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.45",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.16.*",
              "status": "unaffected",
              "version": "6.16.5",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.17-rc4",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.45",
                  "versionStartIncluding": "6.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.16.5",
                  "versionStartIncluding": "6.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.17-rc4",
                  "versionStartIncluding": "6.8",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nRISC-V: KVM: fix stack overrun when loading vlenb\n\nThe userspace load can put up to 2048 bits into an xlen bit stack\nbuffer.  We want only xlen bits, so check the size beforehand."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-09-16T13:00:16.250Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/c76bf8359188a11f8fd790e5bbd6077894a245cc"
        },
        {
          "url": "https://git.kernel.org/stable/c/6d28659b692a0212f360f8bd8a58712b339f9aac"
        },
        {
          "url": "https://git.kernel.org/stable/c/799766208f09f95677a9ab111b93872d414fbad7"
        }
      ],
      "title": "RISC-V: KVM: fix stack overrun when loading vlenb",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2025-39815",
    "datePublished": "2025-09-16T13:00:16.250Z",
    "dateReserved": "2025-04-16T07:20:57.138Z",
    "dateUpdated": "2025-09-16T13:00:16.250Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted