CVE-2025-22013 addresses a vulnerability in the Linux kernel's KVM arm64 virtualization component. It involves issues with how the host's FPSIMD/SVE/SME state is lazily saved, leading to potential data corruption or unexpected behavior, particularly affecting QEMU when SVE is used. The vulnerability is rated Medium severity (CVSS 5.5), indicating a local attack vector with low complexity, requiring low privileges, and resulting in high availability impact (e.g., system crashes) without affecting confidentiality or integrity. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 6.2, < 6.6.85CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 6.7, < 6.12.21CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 6.13, < 6.13.9CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
6.14CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:6.14:rc1:*:*:*:*:*:* | ||
6.14CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:6.14:rc2:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
HP ThinPro 8.1 SP8 Security Updates
Oct 27, 2025HP ThinPro 8.1 SP8 Security Updates
Oct 27, 2025HP ThinPro 8.1 SP8 Security Updates
Oct 27, 2025kernel: KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state
Apr 8, 2025