CVE-2025-40065

INFO Priority: 0.00 BB Relevance: 0/100
Published: 2025-10-28 Modified: 2026-10-30 First seen: 2026-10-30 Status: pending_score

Description

In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Write hgatp register with valid mode bits According to the RISC-V Privileged Architecture Spec, when MODE=Bare is selected,software must write zero to the remaining fields of hgatp. We have detected the valid mode supported by the HW before, So using a valid mode to detect how many vmid bits are supported.

Affected Software (6)

VendorProductVersion
Linux Linux fd7bb4a251dfc1da3496bf59a4793937c13e8c1f < feb64ca53d97b3ac8ba9ecbeae5f9426f1513650
Linux Linux fd7bb4a251dfc1da3496bf59a4793937c13e8c1f < 8b6e327736db013b9e385c3f6f9f0b04ddf26e43
Linux Linux fd7bb4a251dfc1da3496bf59a4793937c13e8c1f < 5cba8ae00279296a586d0596443109d601b1d116
Linux Linux fd7bb4a251dfc1da3496bf59a4793937c13e8c1f < d00b61cd37f4c183ce0edbc9f8ccf6d5430ea357
Linux Linux fd7bb4a251dfc1da3496bf59a4793937c13e8c1f < 2b351e3d04be9e1533f26c3464f1e44a5beace30
Linux Linux 5.16

Bug Bounty Relevance

0 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

0.24%
Raw Score 0.002380
Percentile 14.8%
Date 2026-11-01

EPSS Trend

2026-11-01
0.00238
2026-10-31
0.00238
2026-10-30
0.00238
2026-10-29
0.00238

Intelligence Sources

mitre ref →
nvd ref →