PT-2026-1239 · Linux+3 · Linux Kernel+3
Published
2025-11-14
·
Updated
2026-04-06
·
CVE-2025-68751
CVSS v2.0
1.7
Low
| Vector | AV:L/AC:L/Au:S/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The Linux kernel contains a flaw in the s390/fpu component related to false-positive Kernel Memory Sanitizer (KMSAN) reports within the
fpu vstl() function. This occurs because the 'vstl' inline assembly instruction can write a variable number of bytes depending on the 'index' argument, while clang generates a KMSAN write helper call based on compile-time constraints, potentially using an incorrect byte size. This results in false-positive KMSAN reports, as demonstrated when running the ping command. The issue manifests as uninitialized memory access during network operations, specifically within the virtqueue add function.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Debian
Linuxmint
Linux Kernel
Ubuntu