CVE-2025-39815

CVE-2025-39815

High · published September 16, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
4.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

RISC-V: KVM: fix stack overrun when loading vlenb

The userspace load can put up to 2048 bits into an xlen bit stack

buffer. We want only xlen bits, so check the size beforehand.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00154 · 4.2th percentile
Published
2025-09-16T17:15Z
Affected products (5)
ProductVersionsFixed in
linux/linux_kernel≥ 6.8, < 6.12.456.12.45
linux/linux_kernel≥ 6.13, < 6.16.56.16.5
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (3)
https://git.kernel.org/stable/c/6d28659b692a0212f360f8bd8a58712b339f9aac · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/799766208f09f95677a9ab111b93872d414fbad7 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/c76bf8359188a11f8fd790e5bbd6077894a245cc · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 16 SEP 13:00Z
    RISC-V: KVM: fix stack overrun when loading vlenb
    cvelistv5