{
  "cveId": "CVE-2025-39815",
  "url": "https://patchblox.com/security/cve/CVE-2025-39815",
  "summary": "CVE-2025-39815 is fixed in linux on 1 platform, first by DEBIAN-CVE-2025-39815, released September 16, 2025. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  RISC-V: KVM: fix stack overrun when loading vlen...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  RISC-V: KVM: fix stack overrun when loading vlenb  The userspace load can put up to 2048 bits into an xlen bit stack buffer.  We want only xlen bits, so check the size beforehand.",
  "published": "2025-09-16T13:15:56Z",
  "severity": "medium",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00154,
  "epssPercentile": 0.0459,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.12.48-1",
      "fix": "DEBIAN-CVE-2025-39815",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-39815",
      "released": "2025-09-16T13:15:56Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.16.5-1",
      "fix": "DEBIAN-CVE-2025-39815",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-39815",
      "released": "2025-09-16T13:15:56Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T01:18:40Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}