CVE-2025-37996 is a medium-severity vulnerability in the Linux kernel's KVM subsystem for arm64 architectures. It involves an uninitialized memcache pointer in the user_mem_abort() function, which can lead to a failure in stage-2 memory allocation. The issue arises from a code change that made memcache initialization conditional, leaving a code path where it is used uninitialized. This flaw affects the kernel's memory management during virtualization and can cause availability impact due to allocation failures.