CVE-2025-48610: Android Linux Kernel Configuration Data Leak in Memory Protection
Summary
CVE-2025-48610: In __pkvm_guest_relinquish_to_host of mem_protect.c, there is a possible configuration data leak due to a logic error in the code. Affects :linux_kernel: versions >= :0, < :2025-12-05. Fixed in :2025-12-05. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Android Linux Kernel is a core component of the Android operating system, responsible for managing hardware resources and providing essential services to applications. It includes various modules for memory management, process scheduling, and device control. This vulnerability affects the memory protection mechanisms within the kernel, specifically in the handling of guest virtual machines, which can lead to unintended information disclosure.
Vulnerability Detail
In the function __pkvm_guest_relinquish_to_host of mem_protect.c, a logic error exists that can cause a configuration data leak. This vulnerability allows local attackers to access sensitive information without requiring additional execution privileges. The flaw is rooted in the way the kernel manages memory protection for guest virtual machines, potentially exposing critical data to unauthorized users.
How To Fix
Minimum fixed version
:2025-12-05
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds available for this vulnerability. The best course of action is to apply the patch as soon as it becomes available.
Conclusion
CVE-2025-48610 represents a significant vulnerability in the Android Linux Kernel, allowing for potential local information disclosure due to a logic error in memory protection. Users are strongly advised to update their systems to the patched version to protect against this risk.
See every vulnerability recorded for :linux_kernel: →
FAQ
CVE-2025-48610 is a vulnerability in the Android Linux Kernel that allows local information disclosure due to a logic error in memory protection handling.
Devices running the affected versions of the Android Linux Kernel are at risk, particularly those utilizing virtual machine features.
You can use Vulert, which monitors open-source vulnerabilities in real-time. Visit Vulert Scanner to check if your application is affected without needing to sign up.
Exploitation of this vulnerability could lead to unauthorized access to sensitive configuration data, posing a risk to user privacy and system integrity.
While there are no specific workarounds, it is crucial to prioritize updating your kernel to the patched version as soon as possible to mitigate risks.
Related vulnerabilities
Recent vulnerabilities recorded for :linux_kernel:.
