Linux Kernel CVE-2025-38435

The vulnerability resides in the Linux kernel's RISC-V architecture code responsible for saving and restoring vector register state during process context switches. The xtheadvector extension is a vendor-specific RISC-V vector implementation from T-Head (Alibaba), found in chips such as the Allwinner D1 and Sophgo SG2042. The affected code path incorrectly handled only v0-v7 during context switch, leaving v8-v31 in an undefined/corrupted state when a preempted task was later resumed. CPE data confirms the affected product is cpe:2.3:o:linux:linux_kernel across multiple versions including 6.16 release candidates (rc1 through rc3). No CWE identifier was assigned, but the root cause class is an incomplete or incorrect register state management routine - analogous to CWE-665 (Improper Initialization) or CWE-664 (Improper Control of a Resource Through its Lifetime). The 'Information Disclosure' tag applied by the NVD conflicts with the CVSS C:N metric and the description's focus on availability; while register corruption could theoretically expose stale values from a prior task's v8-v31 state, this is not confirmed by the description.