CVE-2025-39752

ARM: rockchip: fix kernel hang during smp initialization

MEDIUM
5.5
CVSS Score
Published: September 11, 2025 at 04:52 PM UTC
Updated: October 19, 2026 at 09:10 PM UTC
3 products affected across 3 vendorsLinux KernelDebian LinuxSIMATIC CN 4100

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: ARM: rockchip: fix kernel hang during smp initialization In order to bring up secondary CPUs main CPU write trampoline code to SRAM. The trampoline code is written while secondary CPUs are powered on (at least that true for RK3188 CPU). Sometimes that leads to kernel hang. Probably because secondary CPU execute trampoline code while kernel doesn't expect. The patch moves SRAM initialization step to the point where all secondary CPUs are powered down. That fixes rarely hangs on RK3188: [ 0.091568] CPU0: thread -1, cpu 0, socket 0, mpidr 80000000 [ 0.091996] rockchip_smp_prepare_cpus: ncores 4

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

All versions3.19 ≤ v < 5.4.2975.11 ≤ v < 5.15.1905.16 ≤ v < 6.1.1495.5 ≤ v < 5.10.2416.13 ≤ v < 6.15.116.16 ≤ v < 6.16.26.2 ≤ v < 6.6.1036.7 ≤ v < 6.12.433.193ee851e212d0bb6be8c462059fba74ce2e3f6064
Vendor states this is fixed in 0223a3683d502b7e5eb2eb4ad7e97363fa88d531 (fixed)
Vendor states this is fixed in 1eb67589a7e091b1e5108aab72fddbf4dc69af2c (fixed)
Vendor states this is fixed in 265583266d93db4ff83d088819b1f63fdf0131db (fixed)
Vendor states this is fixed in 3c6bf7a324b8995b9c7d790c8d2abf0668f51551 (fixed)
Vendor states this is fixed in 47769dab9073a73e127aa0bfd0ba4c51eaccdc33 (fixed)
Vendor states this is fixed in 7cdb433bb44cdc87dc5260cdf15bf03cc1cd1814 (fixed)
Vendor states this is fixed in 888a453c2a239765a7ab4de8a3cedae2e3802528 (fixed)
Vendor states this is fixed in c0726d1e466e2d0da620836e293a59e6427ccdff (fixed)
Vendor states this is fixed in d7d6d076ee9532c4668f14696a35688d35dd16f4 (fixed)
Vendor states this is fixed in 3.19 (unaffected)
Vendor states this is fixed in 5.10.241 (unaffected)
Vendor states this is fixed in 5.15.190 (unaffected)
Vendor states this is fixed in 5.4.297 (unaffected)
Vendor states this is fixed in 6.1.149 (unaffected)
Vendor states this is fixed in 6.12.43 (unaffected)
Vendor states this is fixed in 6.15.11 (unaffected)
Vendor states this is fixed in 6.16.2 (unaffected)
Vendor states this is fixed in 6.17 (unaffected)
Vendor states this is fixed in 6.6.103 (unaffected)
v < V5.0
Affected range stops below V5.0, so it looks safe — our inference, not a vendor statement

References (12)

Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/0223a3683d502b7e5eb2eb4ad7e97363fa88d531
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/1eb67589a7e091b1e5108aab72fddbf4dc69af2c
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/265583266d93db4ff83d088819b1f63fdf0131db
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/3c6bf7a324b8995b9c7d790c8d2abf0668f51551
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/47769dab9073a73e127aa0bfd0ba4c51eaccdc33
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/7cdb433bb44cdc87dc5260cdf15bf03cc1cd1814
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/888a453c2a239765a7ab4de8a3cedae2e3802528
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/c0726d1e466e2d0da620836e293a59e6427ccdff

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card