AZL-64625 CVE-2025-38170 affecting package kernel for versions less than 6.6.96.1-1

In the Linux kernel, the following vulnerability has been resolved: arm64/fpsimd: Discard stale CPU state when handling SME traps The logic for handling SME traps manipulates saved FPSIMD/SVE/SME state incorrectly, and a race with preemption can result in a task having TIFSME set and...

DEBIAN-CVE-2025-22013

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state There are several problems with the way hyp code lazily saves the host's FPSIMD/SVE state, including: Host SVE being discarded unexpectedly due to inconsistent...

kernel: KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem on ARM64 architectures. The hypervisor improperly manages host floating-point and vector register states when switching context to a virtual machine. A local user with privileges to run virtual machines can exploit...