CVE-2025-71203

Katalog CVE

CVSS 7.0 · High EPSS 0,15%

Kerentanan Improper Validation of Array Index pada linux kernel. Skor CVSS 3.1 7.0 (High) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: riscv: Sanitize syscall table indexing under speculation The syscall number is a user-controlled value used to index into the syscall table. Use array_index_nospec() to clamp this value after the bounds check to prevent speculative out-of-bounds access and subsequent data leakage via cache side channels.

Rincian

Terbit di NVD

14 Februari 2026

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.0 (High), sumber NVD
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-129: Improper Validation of Array Index

EPSS (30 hari)

0,15% peluang dieksploitasi; lebih tinggi dari 3,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/25fd7ee7bf58ac3ec7be3c9f82ceff153451946c patch
• https://git.kernel.org/stable/c/8b44e753795107a22ba31495686e83f4aca48f36 patch
• https://git.kernel.org/stable/c/c45848936ebdb4fcab92f8c39510db83c16d0239 patch
• https://git.kernel.org/stable/c/33743ec6679aa364ee19d1afbaa50593e9e6e443