CVE-2025-40026

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.16.0-rc5-c1610d2d66b1-next-vm

Description The Linux kernel contains an issue within the KVM component related to handling L1 intercepts during userspace I/O completion. Specifically, the kernel may recheck L1 intercepts even after KVM has finished the initial phase of instruction execution, potentially leading to incorrect I/O permission handling. This can occur when port I/O interception is toggled during a userspace I/O exit, resulting in a warning related to the vcpu->arch.pio.count value. The issue was detected by a syzkaller program.

Recommendations Update to version 6.16.0-rc5-c1610d2d66b1-next-vm or a later version to address this issue.