KVM Vulnerability in Linux Kernel Affecting Arm64 Architecture

CVE-2025-40184

What is CVE-2025-40184?

A vulnerability in the Linux kernel's KVM module affects the Arm64 architecture. When utilizing transparent huge pages alongside CONFIG_NVHE_EL2_DEBUG, the debug checking mechanism in assert_host_shared_guest() can fail during the launch of a non-persistent guest (np-guest). This failure triggers a kernel panic as a result of a WARN_ON() assertion. The debug verification inaccurately assumes that the memory mapping is confined to a single page, yet it may comprise a block map. The solution involves modifying this check to accommodate variable sizes appropriately.

References