CVE-2025-37960

CVE-2025-37960 affects the Linux kernel memblock memory handling. When memblock_double_array() grows an array and the slab isn’t yet available, memblock_find_in_range() may return a range that hasn’t been accepted, risking a crash during SNP guest boot (illustrated by memcpy_orig stack trace). Th...

CVE-2025-37960 memblock: Accept allocated memory before use in memblock_double_array()

In the Linux kernel, the following vulnerability has been resolved: memblock: Accept allocated memory before use in memblockdoublearray When increasing the array size in memblockdoublearray and the slab is not yet available, a call to memblockfindinrange is used to reserve/allocate memory. Howeve...