CVE-2025-21950

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been identified, specifically in the "pmcmd ioctl" function within the acrn hypervisor. The issue arises from the use of kmalloc for memory allocation, which can lead to information leakage due to uninitialized bytes. The "hcall get cpu state" initializer, implemented in "acrn hypercall2", is used to initialize memory objects that are then copied to user space. This poses a risk of information leakage.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.