CVE-2025-37846

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2de451a329cf662b

Description A vulnerability in the Linux kernel has been resolved, specifically related to the arm64 architecture. The issue involves the source register not being used for SET* operations, and reading it can result in a UBSAN out-of-bounds array access error. This error occurs when the MOPS exception is taken from a SET* sequence with XZR (reg 31) as the source. The code in do el0 mops() was previously benign due to the use of pt regs read reg(), which prevented the out-of-bounds access.

Recommendations For Linux kernel versions prior to 2de451a329cf662b, update to a version that includes the fix for this issue to prevent potential out-of-bounds array access errors. As a temporary workaround, consider restricting the use of the SET* operation with XZR (reg 31) as the source until a patch is available.