https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-04T07:18:57.100016+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2025-38469 CVE-2025-38469 — KVM: x86/xen: Fix cleanup logic in emulation of Xen schedop poll hypercalls 2026-10-04T07:18:57.180369+00:00

Affected: Linux

In the Linux kernel, the following vulnerability has been resolved:

KVM: x86/xen: Fix cleanup logic in emulation of Xen schedop poll hypercalls

kvm_xen_schedop_poll does a kmalloc_array() when a VM polls the host for more than one event channel potr (nr_ports > 1).

After the kmalloc_array(), the error paths need to go through the "out" label, but the call to kvm_read_guest_virt() does not.

[Adjusted commit message. - Paolo]