CVE-2025-40065

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Write hgatp register with valid mode bits According to the RISC-V Privileged Architecture Spec, when MODE=Bare is selected,software must write zero to the remaining fields of hgatp. We have detected the valid mode supported by the HW before, So using a valid mode to detect how many vmid bits are supported.

SeverityUnknown
CVSS—
Exploit probability—
ProductLinux
PublishedOct 28, 2025
First seenOct 28, 2025

How to fix

Update
  • Linux Linuxfeb64ca53d97b3ac8ba9ecbeae5f9426f1513650, 8b6e327736db013b9e385c3f6f9f0b04ddf26e43, 5cba8ae00279296a586d0596443109d601b1d116, d00b61cd37f4c183ce0edbc9f8ccf6d5430ea357, 2b351e3d04be9e1533f26c3464f1e44a5beace30 or later

Affected products

ProductAffected versionsFixed in
Linux Linuxfd7bb4a251dfc1da3496bf59a4793937c13e8c1f ≤ v < feb64ca53d97b3ac8ba9ecbeae5f9426f1513650, fd7bb4a251dfc1da3496bf59a4793937c13e8c1f ≤ v < 8b6e327736db013b9e385c3f6f9f0b04ddf26e43, fd7bb4a251dfc1da3496bf59a4793937c13e8c1f ≤ v < 5cba8ae00279296a586d0596443109d601b1d116, fd7bb4a251dfc1da3496bf59a4793937c13e8c1f ≤ v < d00b61cd37f4c183ce0edbc9f8ccf6d5430ea357, fd7bb4a251dfc1da3496bf59a4793937c13e8c1f ≤ v < 2b351e3d04be9e1533f26c3464f1e44a5beace30, 5.16feb64ca53d97b3ac8ba9ecbeae5f9426f1513650, 8b6e327736db013b9e385c3f6f9f0b04ddf26e43, 5cba8ae00279296a586d0596443109d601b1d116, d00b61cd37f4c183ce0edbc9f8ccf6d5430ea357, 2b351e3d04be9e1533f26c3464f1e44a5beace30

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2025-40065 · Linux · Dark Radar