Emulation Logic Flaw in Linux Kernel for KVM on Xen Platforms

CVE-2025-38469

What is CVE-2025-38469?

A vulnerability in the Linux kernel affects the KVM on Xen platforms, where the cleanup logic during the emulation of Xen schedop poll hypercalls can lead to improper handling of array memory allocation. Specifically, when a virtual machine polls the host for multiple event channels, the memory allocation via kmalloc_array() may not properly clean up error paths, which could lead to potential stability issues in managed virtual machines.

References