Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fixed an uninitialized memcache pointer in usermemabort The commit fce886a60207 "KVM: arm64: Examining the pKVM MMU in KVM" made the initialization of the local memcache variable in usermemabort conditional. As a...

UBUNTU-CVE-2025-37996

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix uninitialized memcache pointer in usermemabort Commit fce886a60207 "KVM: arm64: Plumb the pKVM MMU in KVM" made the initialization of the local memcache variable in usermemabort conditional, leaving a codepath whe...

CVE-2025-37996

Summary: CVE-2025-37996 affects the Linux kernel on ARM64 with KVM. The root cause was an uninitialized local memcache pointer in user_mem_abort() caused by a conditional initialization after the commit that plumbed the pKVM MMU. A code path through kvm_pgtable_stage2_map() could use the uninitia...