PT-2025-44106 · Linux+2 · Linux Kernel+2
Published
2025-08-19
·
Updated
2026-05-07
·
CVE-2025-40038
CVSS v2.0
6.0
Medium
| Vector | AV:L/AC:H/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.16.0-smp--e6c618b51cfe-sleep #782
Description
The Linux kernel contained an issue in the KVM component related to SVM fastpath emulation. Specifically, the fastpath emulation was not being skipped on VM-Exit if the next RIP was invalid, potentially leading to a sleeping function being called from an invalid context. This could occur when KVM is running with nrips=false, requiring the reading of guest memory through the emulator, which can result in faults. The issue was triggered by an invalid context during the execution of the
vcpu run function within the KVM module.Recommendations
Update the Linux kernel to version 6.16.0-smp--e6c618b51cfe-sleep #782 or a later version to resolve this issue.
Exploit
Fix
Improper Check for Exceptional Conditions
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linuxmint
Linux Kernel
Ubuntu