PT-2026-1239 · Linux+3 · Linux Kernel+3
Publicado
2025-11-14
·
Atualizado
2026-04-06
·
CVE-2025-68751
CVSS v2.0
1.7
Baixa
| Vetor | AV:L/AC:L/Au:S/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The Linux kernel contains a flaw in the s390/fpu component related to false-positive Kernel Memory Sanitizer (KMSAN) reports within the
fpu vstl() function. This occurs because the 'vstl' inline assembly instruction can write a variable number of bytes depending on the 'index' argument, while clang generates a KMSAN write helper call based on compile-time constraints, potentially using an incorrect byte size. This results in false-positive KMSAN reports, as demonstrated when running the ping command. The issue manifests as uninitialized memory access during network operations, specifically within the virtqueue add function.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Debian
Linuxmint
Linux Kernel
Ubuntu