Linux Kernel Vulnerability in RISC-V Vector Context Management

CVE-2025-38435

What is CVE-2025-38435?

A vulnerability exists in the Linux kernel where the context save/restore functionality for RISC-V vector registers was not implemented correctly. Specifically, while registers v0-v7 were appropriately saved and restored, registers v8-v31 were left in an inconsistent state, leading to potential corruption of userspace processes. This flaw necessitates an update to ensure proper handling of all relevant vector registers to maintain system stability and security.

References