CVE-2024-35873

A vulnerability was found in the Linux kernel, affecting the RISC-V architecture. It arises during the restoration of the vector state in the rt_sigreturn() syscall after a signal handler is executed. The bug occurs when the live vector state is discarded and marked as "dirty," leading to corruption of the vector state (vstate) when it is restored, which can cause application crashes.

Red Hat Enterprise Linux is not vulnerable to this CVE, as it does not affect the versions or configurations of the Linux kernel used in its distributions.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.