CVE-2025-38026

kernel: x86/sev: Do not touch VMSA pages during SNP guest memory kdump

Published Jun 18, 2025 CVSS 3.1 · 4.4 Medium EPSS n/a KEV · Not listed

Description

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

No data.

No data available yet.

No remediation available yet

Source	ID	Title
EUVD	EUVD-2025-27878	This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

No CVSS v4.0

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://lore.kernel.org/linux-cve-announce/2025061848-CVE-2025-38026-5674@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2025-38026
https://www.cve.org/CVERecord?id=CVE-2025-38026

History

Type	Values Removed	Values Added
Weaknesses		CWE-99
Metrics	cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}`	cvssV3_1 `{'score': 4.4, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'}`

Type	Values Removed	Values Added
Title		kernel: x86/sev: Do not touch VMSA pages during SNP guest memory kdump
References		https://lore.kernel.org/linux-cve-announce/2025061848-CVE-2025-38026-5674@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2025-38026 https://www.cve.org/CVERecord?id=CVE-2025-38026
Metrics	threat_severity `None`	cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}` threat_severity `Moderate`

Type	Values Removed	Values Added
References	https://git.kernel.org/stable/c/26468ea864fecf496654459e52a6b7a7230bcb6d https://git.kernel.org/stable/c/d2062cc1b1c367d5d019f595ef860159e1301351

Type	Values Removed	Values Added
Description	In the Linux kernel, the following vulnerability has been resolved: x86/sev: Do not touch VMSA pages during SNP guest memory kdump When kdump is running makedumpfile to generate vmcore and dump SNP guest memory it touches the VMSA page of the vCPU executing kdump. It then results in unrecoverable #NPF/RMP faults as the VMSA page is marked busy/in-use when the vCPU is running and subsequently a causes guest softlockup/hang. Additionally, other APs may be halted in guest mode and their VMSA pages are marked busy and touching these VMSA pages during guest memory dump will also cause #NPF. Issue AP_DESTROY GHCB calls on other APs to ensure they are kicked out of guest mode and then clear the VMSA bit on their VMSA pages. If the vCPU running kdump is an AP, mark it's VMSA page as offline to ensure that makedumpfile excludes that page while dumping guest memory.	This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Title	x86/sev: Do not touch VMSA pages during SNP guest memory kdump

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: x86/sev: Do not touch VMSA pages during SNP guest memory kdump When kdump is running makedumpfile to generate vmcore and dump SNP guest memory it touches the VMSA page of the vCPU executing kdump. It then results in unrecoverable #NPF/RMP faults as the VMSA page is marked busy/in-use when the vCPU is running and subsequently a causes guest softlockup/hang. Additionally, other APs may be halted in guest mode and their VMSA pages are marked busy and touching these VMSA pages during guest memory dump will also cause #NPF. Issue AP_DESTROY GHCB calls on other APs to ensure they are kicked out of guest mode and then clear the VMSA bit on their VMSA pages. If the vCPU running kdump is an AP, mark it's VMSA page as offline to ensure that makedumpfile excludes that page while dumping guest memory.
Title		x86/sev: Do not touch VMSA pages during SNP guest memory kdump
References		https://git.kernel.org/stable/c/26468ea864fecf496654459e52a6b7a7230bcb6d https://git.kernel.org/stable/c/d2062cc1b1c367d5d019f595ef860159e1301351