Description
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: smm: number of GPRs in the SMRAM image depends on the image format On 64 bit host, if the guest doesn't have X86_FEATURE_LM, KVM will access 16 gprs to 32-bit smram image, causing out-ouf-bound ram access. On 32 bit host, the rsm_load_state_64/enter_smm_save_state_64 is compiled out, thus access overflow can't happen.
References (2)
Core 2
Scores
CVSS v3
7.1
EPSS
0.0008
EPSS Percentile
22.8%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Details
CWE
CWE-125
Status
published
Products (3)
linux/Kernel
6.0.0 - 6.0.8linux
linux/linux_kernel
6.1 rc1 (3 CPE variants)
linux/linux_kernel
6.0 - 6.0.8
Published
May 01, 2025
Tracked Since
Feb 18, 2026