CVE-2025-40065

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw in the RISC-V KVM implementation where the hgatp register is written with valid mode bits. The RISC-V Privileged Architecture Specification requires that when MODE=Bare is selected, software must write zero to the remaining fields of hgatp. The system detects the valid mode supported by the hardware and uses a valid mode to determine the number of vmid bits supported.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.