PT-2025-30842 · Linux+3 · Linux Kernel+3

Published 2025-05-15 · Updated 2025-11-04 · CVE-2025-38435

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel's RISC-V vector implementation related to context save and restore operations with xtheadvector. Previously, only registers v0-v7 were correctly saved and restored, leading to damage in the context of registers v8-v31. This issue has been addressed by correctly saving and restoring registers v8-v31 to prevent disruptions in user space.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Improper Locking

Weakness Enumeration

CWE-20

CWE-667

Related Identifiers

BDU:2025-09250

BDU:2025-09251

CVE-2025-38435

USN-7833-1

USN-7833-2

USN-7833-3

USN-7833-4

USN-7834-1

USN-7856-1

Affected Products

Astra Linux

Linuxmint

Linux Kernel

Ubuntu

References · 212

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38435.json · Exploit
• https://ubuntu.com/security/CVE-2025-38391 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38408 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7834-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38340 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38523 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38246 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38334 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38087 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38405 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7856-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-38435 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38385 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7833-3 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38406 · Vendor Advisory