Medium severity · published Sep 11, 2025
CVE-2025-39752
ARM: rockchip: fix kernel hang during smp initialization
5.5
CVSS
0.2%
EPSS
No
On KEV
Description
In the Linux kernel, the following vulnerability has been resolved: ARM: rockchip: fix kernel hang during smp initialization In order to bring up secondary CPUs main CPU write trampoline code to SRAM. The trampoline code is written while secondary CPUs are powered on (at least that true for RK3188 CPU). Sometimes that leads to kernel hang. Probably because secondary CPU execute trampoline code while kernel doesn't expect. The patch moves SRAM initialization step to the point where all secondary CPUs are powered down. That fixes rarely hangs on RK3188: [ 0.091568] CPU0: thread -1, cpu 0, socket 0, mpidr 80000000 [ 0.091996] rockchip_smp_prepare_cpus: ncores 4
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 7% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KE
Kernel · Linux
3.19 before 5.4.297; 5.5 before 5.10.241; 5.11 before 5.15.190; 5.16 before 6.1.149; 6.2 before 6.6.103; 6.7 before 6.12.43; +2 more · source: NVD
LI
Linux · Linux
3ee851e212d0bb6be8c462059fba74ce2e3f6064 before 3c6bf7a324b8995b9c7d790c8d2abf0668f51551; 3ee851e212d0bb6be8c462059fba74ce2e3f6064 before 888a453c2a239765a7ab4de8a3cedae2e3802528; 3ee851e212d0bb6be8c462059fba74ce2e3f6064 before c0726d1e466e2d0da620836e293a59e6427ccdff; 3ee851e212d0bb6be8c462059fba74ce2e3f6064 before 265583266d93db4ff83d088819b1f63fdf0131db; 3ee851e212d0bb6be8c462059fba74ce2e3f6064 before d7d6d076ee9532c4668f14696a35688d35dd16f4; 3ee851e212d0bb6be8c462059fba74ce2e3f6064 before 0223a3683d502b7e5eb2eb4ad7e97363fa88d531; +4 more · source: vendor
DL
Debian Linux · Debian
11.0 · source: NVD
SC
SIMATIC CN 4100 · Siemens
before V5.0 · source: CISA