{"id":"ASB-A-432439762","details":"In __pkvm_guest_relinquish_to_host of mem_protect.c, there is a possible configuration data leak due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-432439762","CVE-2025-48610"],"modified":"2026-09-14T15:29:34.961045646Z","published":"2025-12-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2025-12-01"},{"type":"FIX","url":"https://android.googlesource.com/kernel/common/+/19fbea31785113700731f4b458d7e20d05777729"},{"type":"FIX","url":"https://android.googlesource.com/kernel/common/+/cac44a0bcfc58c85082b13220b4adcac43ccf369"}],"affected":[{"package":{"name":":linux_kernel:","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":":0"},{"fixed":":2025-12-05"}]}],"versions":["Kernel"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/kernel/common/+/19fbea31785113700731f4b458d7e20d05777729","https://android.googlesource.com/kernel/common/+/cac44a0bcfc58c85082b13220b4adcac43ccf369"],"severity":"High","spl":"2025-12-05","types":["ID"],"vanir_signatures":[{"deprecated":false,"digest":{"line_hashes":["131227306666441879508761850013441368112","21922552697529305328648648915412699550","52653619669163474568738960784918547520","164040552376946317041095818523462706260"],"threshold":0.9},"id":"ASB-A-432439762-2a10cbb0","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/kernel/common/+/19fbea31785113700731f4b458d7e20d05777729","target":{"file":"arch/arm64/kvm/hyp/nvhe/mem_protect.c"}},{"deprecated":false,"digest":{"line_hashes":["320293772661472312048810456291774574717","91332178168255014158161984022194607833","100747059034036109629162491946924032826","152255240778144219091245669362044770192"],"threshold":0.9},"id":"ASB-A-432439762-4204ac16","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/kernel/common/+/cac44a0bcfc58c85082b13220b4adcac43ccf369","target":{"file":"arch/arm64/kvm/hyp/nvhe/mem_protect.c"}},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/kernel/common/+/19fbea31785113700731f4b458d7e20d05777729","target":{"file":"arch/arm64/kvm/hyp/nvhe/mem_protect.c","function":"__pkvm_guest_relinquish_to_host"},"deprecated":false,"digest":{"function_hash":"309830808234799762205454116092567853765","length":714},"id":"ASB-A-432439762-438efc40"},{"target":{"file":"arch/arm64/kvm/hyp/nvhe/mem_protect.c","function":"__pkvm_guest_relinquish_to_host"},"deprecated":false,"digest":{"length":754,"function_hash":"172209284479236708960883743860973463069"},"id":"ASB-A-432439762-bd687432","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/kernel/common/+/cac44a0bcfc58c85082b13220b4adcac43ccf369"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-432439762.json"}}],"schema_version":"1.9.0"}