CVE-2025-38088

powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap

Published: 6/30/2025 Last updated: 11/3/2025 Reserved: 4/16/2025

In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap memtrace mmap issue has an out of bounds issue. This patch fixes the by checking that the requested mapping region size should stay within the allocated region size.

CNA assigner: Linux (416baaa9-dc9f-4396-8d5f-8c081fb06d67) Requested by: n/a

Opam packages affected (27)

albatross cdrom conf-bpftool conf-libbpf conf-linux-libc-dev core core_unix hvsock mirage-block-unix mm ocaml-probes orun rawlink rawlink-eio rawlink-lwt shell solo5 solo5-bindings-hvt solo5-bindings-spt solo5-cross-aarch64 solo5-kernel-ukvm tracy-client tuntap uring vhd-format vhd-format-lwt xapi-stdext-unix

Products affected (4)

Product	Vendor	Version
Linux	Linux	Windows Server 2008 R2 for x64-based Systems Service Pack 1
Linux	Linux	WSA8840
Linux	Linux	n/a
Linux	Linux	n/a

CVE-2025-38088

powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap

Opam packages affected (27)

Products affected (4)

References (14)