CVE-2025-23135

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

RISC-V: KVM: Teardown riscv specific bits after kvm_exit

During a module removal, kvm_exit invokes arch specific disable

call which disables AIA. However, we invoke aia_exit before kvm_exit

resulting in the following warning. KVM kernel module can't be inserted

afterwards due to inconsistent state of IRQ.

[25469.031389] percpu IRQ 31 still enabled on CPU0!

[25469.031732] WARNING: CPU: 3 PID: 943 at kernel/irq/manage.c:2476 __free_percpu_irq+0xa2/0x150

[25469.031804] Modules linked in: kvm(-)

[25469.031848] CPU: 3 UID: 0 PID: 943 Comm: rmmod Not tainted 6.14.0-rc5-06947-g91c763118f47-dirty #2

[25469.031905] Hardware name: riscv-virtio,qemu (DT)

[25469.031928] epc : __free_percpu_irq+0xa2/0x150

[25469.031976] ra : __free_percpu_irq+0xa2/0x150

[25469.032197] epc : ffffffff8007db1e ra : ffffffff8007db1e sp : ff2000000088bd50

[25469.032241] gp : ffffffff8131cef8 tp : ff60000080b96400 t0 : ff2000000088baf8

[25469.032285

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References