CVE-2025-21950

In the Linux kernel, the following vulnerability has been resolved: drivers: virt: acrn: hsm: Use kzalloc to avoid info leak in pmcmdioctl In the "pmcmdioctl" function, three memory objects allocated by kmalloc are initialized by "hcallgetcpustate", which are then copied to user space. The...

CVE-2025-21950

CVE-2025-21950 affects the Linux kernel driver path drivers: virt: acrn: hsm. In pmcmd_ioctl, three kmalloc-allocated memory objects initialized by hcall_get_cpu_state are copied to user space, risking information leakage from uninitialized bytes. The fix uses kzalloc to zero memory, mitigating l...