CVE-2025-71203
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
14/02/2026
Last modified:
14/02/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
riscv: Sanitize syscall table indexing under speculation<br />
<br />
The syscall number is a user-controlled value used to index into the<br />
syscall table. Use array_index_nospec() to clamp this value after the<br />
bounds check to prevent speculative out-of-bounds access and subsequent<br />
data leakage via cache side channels.



