CVE-2025-38169
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2025
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
arm64/fpsimd: Avoid clobbering kernel FPSIMD state with SMSTOP
In the Linux kernel, the following vulnerability has been resolved: arm64/fpsimd: Avoid clobbering kernel FPSIMD state with SMSTOP On system with SME, a thread's kernel FPSIMD state may be erroneously clobbered during a context switch immediately after that state is restored. Systems without SME are unaffected. If the CPU happens to be in streaming SVE mode before a context switch to a thread with kernel FPSIMD state, fpsimd_thread_switch() will restore the kernel FPSIMD state using fpsimd_load_kernel_state() while the CPU is still in streaming SVE mode. When fpsimd_thread_switch() subsequently calls fpsimd_flush_cpu_state(), this will execute an SMSTOP, causing an exit from streaming SVE mode. The exit from streaming SVE mode will cause the hardware to reset a number of FPSIMD/SVE/SME registers, clobbering the FPSIMD state. Fix this by calling fpsimd_flush_cpu_state() before restoring the kernel FPSIMD state.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| e92bee9f861b466c676f0200be3e46af7bc4ac6b | affected | git | 55d52af498daea75aa03ba9b7e444c8ae495ac20 | Unavailable | None listed |
| e92bee9f861b466c676f0200be3e46af7bc4ac6b | affected | git | a305821f597ec943849d3e53924adb88c61ed682 | Unavailable | None listed |
| e92bee9f861b466c676f0200be3e46af7bc4ac6b | affected | git | 01098d893fa8a6edb2b56e178b798e3e6b674f02 | Unavailable | None listed |
| e003c485ac82a9f8de4204912ed059ac6dd4257c | affected | git | Unavailable | Unavailable | None listed |
| 25b90cd122d546823da90b916f7c3289dfe83a99 | affected | git | Unavailable | Unavailable | None listed |
| 6.8.12 | affected | semver | 6.9 | Unavailable | None listed |
| 6.9.3 | affected | semver | 6.10 | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 6.10 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 6.10 | Unavailable | None listed |
| 6.12.34 | unaffected | semver | Unavailable | 6.12.* | None listed |
| 6.15.3 | unaffected | semver | Unavailable | 6.15.* | None listed |
| 6.16 | unaffected | original_commit_for_fix | Unavailable | * | None listed |