Critical Vulnerability in Linux Kernel: Arm64 MOPS Dereference Issue
Summary
DEBIAN-CVE-2025-37846: In the Linux kernel, the following vulnerability has been resolved: arm64: mops: Do not dereference src reg for a set operation The source register is not used for SET* and reading it can result in a UBSAN out-of-bounds... Affects linux versions < 6.12.25-1. Fixed in 6.12.25-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, responsible for managing hardware resources and providing essential services to software applications. It is widely used across various platforms, including servers, desktops, and embedded systems. This specific vulnerability affects the arm64 architecture, where a flaw in the MOPS instruction handling can lead to serious security risks due to improper register dereferencing.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified related to the MOPS instruction for arm64 architecture. The issue arises when the source register is not properly handled during SET* operations, potentially leading to an out-of-bounds array access error. This occurs specifically when the MOPS exception is triggered with the XZR register (reg 31) as the source. The vulnerability was introduced prior to the commit 2de451a329cf662b, where the code in do_el0_mops() was benign due to safeguards against out-of-bounds access. If exploited, this vulnerability could allow an attacker to manipulate kernel operations, leading to system instability or unauthorized access.
How To Fix
Minimum fixed version
6.12.25-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the available patch as soon as possible.
Conclusion
The vulnerability identified in the Linux kernel regarding the arm64 MOPS instruction poses significant risks if left unaddressed. Users are strongly advised to update their systems to the patched version to mitigate potential threats. Utilizing tools like Vulert can further enhance security by providing real-time monitoring for vulnerabilities.
See every vulnerability recorded for linux →
FAQ
The vulnerability involves improper handling of the source register in the MOPS instruction for arm64 architecture, leading to potential out-of-bounds access.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities. By uploading your manifest file like package-lock.json, you can check if your application is affected by this vulnerability.
If exploited, this vulnerability could lead to system instability, unauthorized access, or manipulation of kernel operations.
Yes, a patch is available in version 6.12.25-1 of the Linux kernel. Users should update to this version or later.
You can use Vulert to receive real-time alerts for open-source vulnerabilities in your software, ensuring you are always informed about potential risks.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
