CVE-2025-40181 — Linux vulnerability
13 documents6 sources
Severity
5.5MEDIUM
No vectorEPSS
0.0%
top 94.67%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedNov 12
Latest updateFeb 24
Description
In the Linux kernel, the following vulnerability has been resolved:
x86/kvm: Force legacy PCI hole to UC when overriding MTRRs for TDX/SNP
When running as an SNP or TDX guest under KVM, force the legacy PCI hole,
i.e. memory between Top of Lower Usable DRAM and 4GiB, to be mapped as UC
via a forced variable MTRR range.
In most KVM-based setups, legacy devices such as the HPET and TPM are
enumerated via ACPI. ACPI enumeration includes a Memory32Fixed entry, and
optionally a SystemMemory descri…
Affected Packages5 packages
▶CVEListV5linux/linux8e690b817e38769dc2fa0e7473e5a5dc1fc25795 — 34ff466f74d0fe1db8956f9c245e2bb2c67f67bf+3
🔴Vulnerability Details
7GHSA▶
GHSA-x7gh-c69c-j2v8: In the Linux kernel, the following vulnerability has been resolved:
x86/kvm: Force legacy PCI hole to UC when overriding MTRRs for TDX/SNP
When runn↗2025-11-13
📋Vendor Advisories
5Debian▶
CVE-2025-40181: linux - In the Linux kernel, the following vulnerability has been resolved: x86/kvm: Fo...↗2025