CVE-2025-71203
EUVD-2025-20699214.02.2026, 17:15
In the Linux kernel, the following vulnerability has been resolved: riscv: Sanitize syscall table indexing under speculation The syscall number is a user-controlled value used to index into the syscall table. Use array_index_nospec() to clamp this value after the bounds check to prevent speculative out-of-bounds access and subsequent data leakage via cache side channels.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| linux | linux_kernel | 6.4 ≤ 𝑥 < 6.12.70 |
| linux | linux_kernel | 6.13 ≤ 𝑥 < 6.18.10 |
| linux | linux_kernel | 6.19:rc1 |
| linux | linux_kernel | 6.19:rc2 |
| linux | linux_kernel | 6.19:rc3 |
| linux | linux_kernel | 6.19:rc4 |
𝑥
= Vulnerable software versions
Debian Releases
Vulnerability Media Exposure