עברית

Vulnerability Intelligence

CVE-2025-39815

Medium 5.5

Published
Last modified
NVD status
Modified

Description

In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: fix stack overrun when loading vlenb The userspace load can put up to 2048 bits into an xlen bit stack buffer. We want only xlen bits, so check the size beforehand.

Affected products

linux: linux kernel

References3

Metrics

CVSS 3.1
5.5 MEDIUM Score source: NVD CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS — exploit probability
0% percentile: 5 · as of 8 November 2026

Could this be exploited in your environment?

A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.