Vulnerability in Linux Kernel Affects Stack Management Features

CVE-2025-38670

What is CVE-2025-38670?

An issue in the Linux kernel related to improper handling of stack management functions cpu_switch_to() and call_on_irq_stack() has been identified. When these functions manipulate stack pointers, they may be interrupted by SErrors or Debug Exceptions, leading to potential stack mismatches. Specifically, if an interrupt occurs while switching stacks, the kernel may mistakenly save the old task's Shadow Call Stack pointer, resulting in clobbered stack states. Such discrepancies can cause tasks to return to incorrect addresses, triggering kernel panics under certain configuration settings. Although this situation arises under unlikely conditions, enabling specific configurations can exacerbate the frequency of these interruptions, compounding the risk of unpredictable system behavior.

References