01 Record

CVE-2025-38670

arm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack()

HighPUBLISHEDCNA: Linux

CNA base score7.8 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

arm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack()

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.16% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 5.3% of scored records. A rank, not a probability.
NVD base score: 7.1 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-07-30.
Red Hat severity: No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-08-22 16:03Z1 YR AGO

Last updated

2026-08-05 12:03Z1 MO AGO

Reserved

2025-04-16

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.8)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-668Exposure of Resource to Wrong SphereClass

Data version

5.2

Document digest

ca40c6c9135aea41fbc628e135b3706899d802bb58614d5e53d9c26f25a3aa97

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux3f225f29c69c13ce1cbdb1d607a42efeef080056 to < f7e0231eeaa33245c649fac0303cf97209605446, 402d2b1d54b7085d0c3bfd01fd50c2701dde64b3 to < 407047893a64399f2d2390ff35cc6061107d805d, 4403c7b7e5e1ad09a266b6e399fd7bf97931508e to < a6b0cb523eaa01efe8a3f76ced493ba60674c6e6, 59b37fe52f49955791a460752c37145f1afdcad1 to < 9433a5f437b0948d6a2d8a02ad7a42ab7ca27a61, 59b37fe52f49955791a460752c37145f1afdcad1 to < 708fd522b86d2a9544c34ec6a86fa3fc23336525, 59b37fe52f49955791a460752c37145f1afdcad1 to < 0f67015d72627bad72da3c2084352e0aa134416b, 59b37fe52f49955791a460752c37145f1afdcad1 to < d42e6c20de6192f8e4ab4cf10be8c694ef27e8cb, e47ce4f11e26fa3ea99b09521da8b3ac3a7b578d, 5.10.180 to < 5.10.210, 5.15.111 to < 5.15.190, 6.1.28 to < 6.1.149, 6.2.15 to < 6.3, 6.3—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/f7e0231eeaa33245c649fac0303cf97209605446
git.kernel.orghttps://git.kernel.org/stable/c/407047893a64399f2d2390ff35cc6061107d805d
git.kernel.orghttps://git.kernel.org/stable/c/a6b0cb523eaa01efe8a3f76ced493ba60674c6e6
git.kernel.orghttps://git.kernel.org/stable/c/9433a5f437b0948d6a2d8a02ad7a42ab7ca27a61
git.kernel.orghttps://git.kernel.org/stable/c/708fd522b86d2a9544c34ec6a86fa3fc23336525
git.kernel.orghttps://git.kernel.org/stable/c/0f67015d72627bad72da3c2084352e0aa134416b
git.kernel.orghttps://git.kernel.org/stable/c/d42e6c20de6192f8e4ab4cf10be8c694ef27e8cb
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00008.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-032379.html

01 Record index

CVE-2025-38670

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2025-38670

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References