CVE-2025-38560

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The Linux kernel contains a cache coherency vulnerability within the x86/sev subsystem related to Secure Nested Paging (SNP) memory validation. The issue requires cache line eviction mitigation when validating memory after a page state change to private. The mitigation involves accessing the first and last byte of each 4K page being validated. This mitigation is not necessary when changing a page state to shared or rescinding validation, or if the COHERENCY SFW NO CPUID bit is set.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.