Riskcovery

CVE-2025-38469

KVM: x86/xen: Fix cleanup logic in emulation of Xen schedop poll hypercalls

State
Published
Severity
Not scored
Published
Jul 28, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

KVM: x86/xen: Fix cleanup logic in emulation of Xen schedop poll hypercalls

kvm_xen_schedop_poll does a kmalloc_array() when a VM polls the host for more than one event channel potr (nr_ports > 1).

After the kmalloc_array(), the error paths need to go through the "out" label, but the call to kvm_read_guest_virt() does not.

[Adjusted commit message. - Paolo]

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 92c58965e9656dc6e682a8ffe520fac0fb256d13 to before 3ee59c38ae7369ad1f7b846e05633ccf0d159fabAffected
  • 92c58965e9656dc6e682a8ffe520fac0fb256d13 to before fd627ac8a5cff4d45269f164b13ddddc0726f2ccAffected
  • 92c58965e9656dc6e682a8ffe520fac0fb256d13 to before 061c553c66bc1638c280739999224c8000fd4602Affected
  • 92c58965e9656dc6e682a8ffe520fac0fb256d13 to before 5a53249d149f48b558368c5338b9921b76a12f8cAffected
LinuxLinux
  • 6.2Affected
  • before 6.2Not affected
  • 6.6.100 through 6.6.*Not affected
  • 6.12.40 through 6.12.*Not affected
  • 6.15.8 through 6.15.*Not affected
  • 6.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.