Riskcovery

CVE-2025-40065

RISC-V: KVM: Write hgatp register with valid mode bits

State
Published
Severity
Not scored
Published
Oct 28, 2025
Updated
Oct 30, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

RISC-V: KVM: Write hgatp register with valid mode bits

According to the RISC-V Privileged Architecture Spec, when MODE=Bare is selected,software must write zero to the remaining fields of hgatp.

We have detected the valid mode supported by the HW before, So using a valid mode to detect how many vmid bits are supported.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • fd7bb4a251dfc1da3496bf59a4793937c13e8c1f to before feb64ca53d97b3ac8ba9ecbeae5f9426f1513650Affected
  • fd7bb4a251dfc1da3496bf59a4793937c13e8c1f to before 8b6e327736db013b9e385c3f6f9f0b04ddf26e43Affected
  • fd7bb4a251dfc1da3496bf59a4793937c13e8c1f to before 5cba8ae00279296a586d0596443109d601b1d116Affected
  • fd7bb4a251dfc1da3496bf59a4793937c13e8c1f to before d00b61cd37f4c183ce0edbc9f8ccf6d5430ea357Affected
  • fd7bb4a251dfc1da3496bf59a4793937c13e8c1f to before 2b351e3d04be9e1533f26c3464f1e44a5beace30Affected
LinuxLinux
  • 5.16Affected
  • before 5.16Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.160 through 6.6.*Not affected
  • 6.12.114 through 6.12.*Not affected
  • 6.17.3 through 6.17.*Not affected
  • 6.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.