State Pointer Initialization Flaw in Linux Kernel Affects Multiple Systems

CVE-2025-38675

What is CVE-2025-38675?

A vulnerability in the Linux kernel involves improper initialization of state pointers during context switching. The issue arises when handling preemption, where a lookup on one CPU may incorrectly reference states associated with another CPU. This flaw could enable unsafe operations in future modifications if not adequately addressed, necessitating immediate attention and resolution. The patch has been applied to ensure proper initialization of state pointers following the acquisition of read locks, which mitigates this potential misuse.

References