AZL-77757
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-77757.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-77757
- Upstream
- Published
- 2026-02-14T17:15:54Z
- Modified
- 2026-04-01T05:23:10.154446Z
- Summary
- CVE-2025-71203 affecting package kernel 6.6.126.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
riscv: Sanitize syscall table indexing under speculation
The syscall number is a user-controlled value used to index into the syscall table. Use arrayindexnospec() to clamp this value after the bounds check to prevent speculative out-of-bounds access and subsequent data leakage via cache side channels.
- References