Vulnerability in Linux Kernel Affects RISC-V Architecture

CVE-2025-40065

What is CVE-2025-40065?

A vulnerability in the Linux kernel impacts systems using the RISC-V architecture. The flaw relates to improper handling of the hgatp register when the mode is set to Bare. Specifically, software must write zero to the remaining fields of the hgatp register under these conditions. Failure to address this could expose systems to security risks during virtual machine management, as it relies on detecting valid modes supported by hardware.

References