Threats tagged 'ghsa-4wfv-x2vf-68j5'

CVE-2025-37849 is a high-severity vulnerability in the Linux kernel's KVM subsystem for arm64 architectures. It involves improper cleanup of virtual Generic Interrupt Controller (vGIC) data when virtual CPU (vCPU) creation fails. This flaw can lead to memory leaks and use-after-free conditions, potentially allowing attackers with limited privileges to cause system instability or escalate privileges.