PT-2025-29056 · Linux+6 · Linux Kernel+6
Published
2025-07-10
·
Updated
2026-04-20
·
CVE-2025-38334
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
The Linux kernel contains a flaw where the SGX page reclaimer attempts to reclaim poisoned pages. This can lead to a kernel panic, potentially causing system instability. The issue arises because SGX instructions do not handle machine checks gracefully, and the reclaimer logic does not check for poisoned pages before attempting to reclaim them. Reclaiming poisoned pages can trigger microcode operations that cause a core shutdown and subsequent kernel panic. The vulnerability occurs when attempting to encrypt and write the contents of a poisoned EPC page to non-SGX memory.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Improper Check for Exceptional Conditions
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu