CVE-2025-39815
High
RISC-V: KVM: fix stack overrun when loading vlenb
In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: fix stack overrun when loading vlenb The userspace load can put up to 2048 bits into an xlen bit stack buffer. We want only xlen bits, so check the size beforehand.
Exploit probability
0.1%
Published
September 16, 2025
Required by
Not available
Last source change
August 12, 2026
02 / AFFECTED SOFTWARE
Affected packages
04 / EVIDENCE
Source records
Open Source Vulnerabilities
CVE-2025-39815
View original source
In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: fix stack overrun when loading vlenb The userspace load can put up to 2048 bits into an xlen bit stack buffer. We want only xlen bits, so check the size beforehand.
05 / REFERENCES
Further evidence
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- https://git.kernel.org/stable/c/6d28659b692a0212f360f8bd8a58712b339f9aac
- https://git.kernel.org/stable/c/799766208f09f95677a9ab111b93872d414fbad7
- https://git.kernel.org/stable/c/c76bf8359188a11f8fd790e5bbd6077894a245cc
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/39xxx/CVE-2025-39815.json
- https://nvd.nist.gov/vuln/detail/CVE-2025-39815