Linux Kernel Vulnerability in RISC-V Architecture from Major Vendor

CVE-2025-38261

What is CVE-2025-38261?

A vulnerability in the Linux kernel affects the RISC-V architecture, where improper handling of thread/task switches leads to kernel access issues during high-load scenarios. The problem is exemplified by a crash occurring in the schedule_tail function due to the put_user() macro's misuse. This flaw can cause the SR_SUM state to be altered unexpectedly, risking system stability. The kernel code has been updated to evaluate arguments of critical user access functions before enabling user access, thus ensuring better resource management and preventing potential crashes in future implementations.

References