Critical Vulnerability in Linux Kernel Affecting Debian Packages: CVE-2025-40065
Summary
DEBIAN-CVE-2025-40065: In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Write hgatp register with valid mode bits According to the RISC-V Privileged Architecture Spec, when MODE=Bare is selected,software must wr... Affects linux versions 6.1.106-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Debian operating system, responsible for managing system resources and enabling communication between hardware and software. It is known for its stability, performance, and security features. However, vulnerabilities can arise, impacting the system's integrity and security. CVE-2025-40065 specifically affects the RISC-V architecture within the kernel, highlighting a flaw in how the hgatp register is managed.
Vulnerability Detail
CVE-2025-40065 is a vulnerability in the Linux kernel related to the RISC-V architecture's handling of the hgatp register. When the Bare mode is selected, the specification requires that remaining fields of the hgatp register be set to zero. Failure to adhere to this requirement can lead to improper handling of virtual memory identifiers (vmid), potentially allowing unauthorized access or manipulation of system resources. This vulnerability could have serious implications for systems relying on RISC-V architecture, affecting their stability and security.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, no specific workarounds are provided for this vulnerability. The best course of action is to apply the patch as soon as it becomes available.
Conclusion
CVE-2025-40065 represents a significant vulnerability in the Linux kernel affecting Debian systems using the RISC-V architecture. Users are advised to update their systems promptly to mitigate potential risks associated with this issue. Regular monitoring and prompt application of security updates are essential for maintaining system integrity.
See every vulnerability recorded for linux →
FAQ
CVE-2025-40065 is a vulnerability in the Linux kernel affecting the RISC-V architecture, specifically related to the handling of the hgatp register.
This vulnerability could allow unauthorized access or manipulation of system resources, potentially compromising the stability and security of systems using the RISC-V architecture.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
While there are no specific workarounds available, it is crucial to monitor for updates and apply them as soon as they are released to mitigate the risk.
Further details can be found in the official CVE database and security advisories related to the Linux kernel.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
