CVE-2025-38435
Description
From CVE.org
In the Linux kernel, the following vulnerability has been resolved: riscv: vector: Fix context save/restore with xtheadvector Previously only v0-v7 were correctly saved/restored, and the context of v8-v31 are damanged. Correctly save/restore v8-v31 to avoid breaking userspace.
Statement
Red Hat Enterprise Linux is not impacted by this vulnerability because the affected RISC-V vector handling logic is not included in supported kernels. The defect involves incomplete preservation of vector register states during process context switching on specific RISC-V hardware, which could lead to application-level register corruption or unexpected execution behavior. Since the affected architecture-specific extensions are absent from Red Hat product kernels, there is no operational or security risk to supported environments.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
