In the Linux kernel, the following vulnerability has been resolved: ARM: rockchip: fix kernel hang during smp initialization In order to bring up secondary CPUs main CPU write trampoline code to SRAM. The trampoline code is written while secondary CPUs are powered on (at least that true for RK3188 CPU). Sometimes that leads to kernel hang. Probably because secondary CPU execute trampoline code while kernel doesn't expect. The patch moves SRAM initialization step to the point where all secondary CPUs are powered down. That fixes rarely hangs on RK3188: [ 0.091568] CPU0: thread -1, cpu 0, socket 0, mpidr 80000000 [ 0.091996] rockchip_smp_prepare_cpus: ncores 4

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

No data.

No data.

References
Link Providers
https://git.kernel.org/stable/c/0223a3683d502b7e5eb2eb4ad7e97363fa88d531 cve-icon cve-icon
https://git.kernel.org/stable/c/1eb67589a7e091b1e5108aab72fddbf4dc69af2c cve-icon cve-icon
https://git.kernel.org/stable/c/265583266d93db4ff83d088819b1f63fdf0131db cve-icon cve-icon
https://git.kernel.org/stable/c/3c6bf7a324b8995b9c7d790c8d2abf0668f51551 cve-icon cve-icon
https://git.kernel.org/stable/c/47769dab9073a73e127aa0bfd0ba4c51eaccdc33 cve-icon cve-icon
https://git.kernel.org/stable/c/7cdb433bb44cdc87dc5260cdf15bf03cc1cd1814 cve-icon cve-icon
https://git.kernel.org/stable/c/888a453c2a239765a7ab4de8a3cedae2e3802528 cve-icon cve-icon
https://git.kernel.org/stable/c/c0726d1e466e2d0da620836e293a59e6427ccdff cve-icon cve-icon
https://git.kernel.org/stable/c/d7d6d076ee9532c4668f14696a35688d35dd16f4 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025091143-CVE-2025-39752-c203@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-39752 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-39752 cve-icon
History

Fri, 12 Sep 2025 08:15:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Vendors & Products Linux
Linux linux Kernel

Fri, 12 Sep 2025 00:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Low

Thu, 11 Sep 2025 17:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: ARM: rockchip: fix kernel hang during smp initialization In order to bring up secondary CPUs main CPU write trampoline code to SRAM. The trampoline code is written while secondary CPUs are powered on (at least that true for RK3188 CPU). Sometimes that leads to kernel hang. Probably because secondary CPU execute trampoline code while kernel doesn't expect. The patch moves SRAM initialization step to the point where all secondary CPUs are powered down. That fixes rarely hangs on RK3188: [ 0.091568] CPU0: thread -1, cpu 0, socket 0, mpidr 80000000 [ 0.091996] rockchip_smp_prepare_cpus: ncores 4
Title ARM: rockchip: fix kernel hang during smp initialization
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-09-11T16:52:23.372Z

Reserved: 2025-04-16T07:20:57.125Z

Link: CVE-2025-39752

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2025-09-11T17:15:38.900

Modified: 2025-09-11T17:15:38.900

Link: CVE-2025-39752

cve-icon Redhat

Severity : Low

Publid Date: 2025-09-11T00:00:00Z

Links: CVE-2025-39752 - Bugzilla