BaseFortify

Publication date: 2026-01-23

Last updated on: 2026-02-26

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix gmap_helper_zap_one_page() again A few checks were missing in gmap_helper_zap_one_page(), which can lead to memory corruption in the guest under specific circumstances. Add the missing checks.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-01-23

Last Modified

2026-02-26

Generated

2026-07-06

AI Q&A

2026-01-23

EPSS Evaluated

2026-07-05

NVD

CVE-2025-71155

EUVD

EUVD-2026-4402

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	From 6.17.4 (inc) to 6.18 (exc)
linux	linux_kernel	From 6.18 (inc) to 6.18.4 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-787	The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability is in the Linux kernel's KVM subsystem for s390 architecture. It involves missing checks in the function gmap_helper_zap_one_page(), which can lead to memory corruption in the guest virtual machine under specific circumstances. The issue was fixed by adding the missing checks.

Impact Analysis

The vulnerability can cause memory corruption in the guest virtual machine, which may lead to instability, crashes, or potential security risks within the affected virtual environment.

Hi! I’m here to help you understand CVE-2025-71155. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70