CVE-2025-39752

CVE-2025-39752

Medium · published September 11, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
6.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ARM: rockchip: fix kernel hang during smp initialization

In order to bring up secondary CPUs main CPU write trampoline

code to SRAM. The trampoline code is written while secondary

CPUs are powered on (at least that true for RK3188 CPU).

Sometimes that leads to kernel hang. Probably because secondary

CPU execute trampoline code while kernel doesn't expect.

The patch moves SRAM initialization step to the point where all

secondary CPUs are powered down.

That fixes rarely hangs on RK3188:

[ 0.091568] CPU0: thread -1, cpu 0, socket 0, mpidr 80000000

[ 0.091996] rockchip_smp_prepare_cpus: ncores 4

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00176 · 6.7th percentile
Published
2025-09-11T21:15Z
Affected products (9)
ProductVersionsFixed in
linux/linux_kernel≥ 3.19, < 5.4.2975.4.297
linux/linux_kernel≥ 5.5, < 5.10.2415.10.241
linux/linux_kernel≥ 5.11, < 5.15.1905.15.190
linux/linux_kernel≥ 5.16, < 6.1.1496.1.149
linux/linux_kernel≥ 6.2, < 6.6.1036.6.103
linux/linux_kernel≥ 6.7, < 6.12.436.12.43
linux/linux_kernel≥ 6.13, < 6.15.116.15.11
linux/linux_kernel≥ 6.16, < 6.16.26.16.2
debian/debian_linuxall versions—
References (12)
EPSS history
Timeline
  • 11 SEP 16:52Z
    ARM: rockchip: fix kernel hang during smp initialization
    cvelistv5