KVM Vulnerability in Arm64 Linux Kernel Affecting Userspace Access

CVE-2025-40102

What is CVE-2025-40102?

A vulnerability in the Linux kernel KVM component allows userspace applications to pend vCPU events for uninitialized vCPUs, potentially causing the kernel to execute uninitialized data that could lead to illegal state transitions. This issue, documented in kernel code, emphasizes the need for strict access controls to ensure that events are not injected before a vCPU is properly initialized. The repercussions include possible kernel panics and instability due to error conditions triggered by erroneous event handling.

References