CVE-2025-38435: riscv: vector: Fix context save/restore with xtheadvector
In the Linux kernel, the following vulnerability has been resolved:
riscv: vector: Fix context save/restore with xtheadvector
Previously only v0-v7 were correctly saved/restored, and the context of v8-v31 are damanged. Correctly save/restore v8-v31 to avoid breaking userspace.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38435?
CVE-2025-38435 is categorized as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2025-38435?
To fix CVE-2025-38435, update the Linux kernel to the latest version where this vulnerability has been patched.
What does CVE-2025-38435 affect?
CVE-2025-38435 affects the context saving and restoring mechanism in the RISC-V vector implementation of the Linux kernel.
What are the consequences of CVE-2025-38435?
The consequences of CVE-2025-38435 can lead to userspace applications malfunctioning due to the incorrect context of vector registers v8-v31.
Is CVE-2025-38435 exploitable?
CVE-2025-38435 is not known to be directly exploitable; however, it poses a risk to system stability and application reliability.