CVE-2025-38366 - LoongArch: KVM: Check validity of "num_cpu" from user space

Back Back to CVE browser

HIGH

LoongArch: KVM: Check validity of "num_cpu" from user space

Published Jul 25, 2025

7.8

HIGH

CVSS 3.1

EPSS 0.15%

Description

The maximum supported cpu number is EIOINTC_ROUTE_MAX_VCPUS about irqchip EIOINTC, here add validation about cpu number to avoid array pointer overflow.

Affected products

Vendor Linux Product Linux Default
unaffected
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
Vendor Linux Product Linux Default
affected
- Version
  6.13
  Status
  affected
  Constraints
  -
- Version
  0
  Status
  unaffected
  Constraints
  <6.13
- Version
  6.15.5
  Status
  unaffected
  Constraints
  <=6.15.*
- Version
  6.16
  Status
  unaffected
  Constraints
  <=*

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Linux

unaffected

Version	Status	Constraints
	affected
	affected

Linux

affected

Version	Status	Constraints
6.13	affected	-
0	unaffected	<6.13
6.15.5	unaffected	<=6.15.*
6.16	unaffected	<=*

Red Hat Enterprise Linux 10

kernel

Not affected
Red Hat Enterprise Linux 6

kernel

Not affected
Red Hat Enterprise Linux 7

kernel

Not affected
Red Hat Enterprise Linux 7

kernel-rt

Not affected
Red Hat Enterprise Linux 8

kernel

Not affected
Red Hat Enterprise Linux 8

kernel-rt

Not affected
Red Hat Enterprise Linux 9

kernel

Not affected
Red Hat Enterprise Linux 9

kernel-rt

Not affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 10	kernel	Not affected	n/a
Red Hat Enterprise Linux 6	kernel	Not affected	n/a
Red Hat Enterprise Linux 7	kernel	Not affected	n/a
Red Hat Enterprise Linux 7	kernel-rt	Not affected	n/a
Red Hat Enterprise Linux 8	kernel	Not affected	n/a
Red Hat Enterprise Linux 8	kernel-rt	Not affected	n/a
Red Hat Enterprise Linux 9	kernel	Not affected	n/a
Red Hat Enterprise Linux 9	kernel-rt	Not affected	n/a

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (7)

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2025-38366		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2383383		Issue Tracking
https://git.kernel.org/stable/c/a3293b4078ee93174f70f36d3ab7618554ce6ab6		Patch
https://git.kernel.org/stable/c/cc8d5b209e09d3b52bca1ffe00045876842d96ae		Patch
https://lore.kernel.org/linux-cve-announce/2025072558-CVE-2025-38366-26b8@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2025-38366
https://www.cve.org/CVERecord?id=CVE-2025-38366