0.0
NA
CVE-2025-39752
ARM: rockchip: fix kernel hang during smp initialization
Description

In the Linux kernel, the following vulnerability has been resolved: ARM: rockchip: fix kernel hang during smp initialization In order to bring up secondary CPUs main CPU write trampoline code to SRAM. The trampoline code is written while secondary CPUs are powered on (at least that true for RK3188 CPU). Sometimes that leads to kernel hang. Probably because secondary CPU execute trampoline code while kernel doesn't expect. The patch moves SRAM initialization step to the point where all secondary CPUs are powered down. That fixes rarely hangs on RK3188: [ 0.091568] CPU0: thread -1, cpu 0, socket 0, mpidr 80000000 [ 0.091996] rockchip_smp_prepare_cpus: ncores 4

INFO

Published Date :

Sept. 11, 2025, 5:15 p.m.

Last Modified :

Sept. 11, 2025, 5:15 p.m.

Remotely Exploit :

No

Source :

416baaa9-dc9f-4396-8d5f-8c081fb06d67
Affected Products

The following products are affected by CVE-2025-39752 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

No affected product recoded yet

Solution
The vulnerability is fixed by initializing SRAM when all secondary CPUs are powered down.
  • Apply the provided patch to the Linux kernel.
  • Initialize SRAM after powering down secondary CPUs.
  • Ensure secondary CPUs are powered down before SRAM initialization.
  • Test the system for kernel hangs during SMP initialization.
CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2025-39752 is associated with the following CWEs:

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2025-39752 weaknesses.

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2025-39752 vulnerability anywhere in the article.

The following table lists the changes that have been made to the CVE-2025-39752 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

  • New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67

    Sep. 11, 2025

    Action Type Old Value New Value
    Added Description In the Linux kernel, the following vulnerability has been resolved: ARM: rockchip: fix kernel hang during smp initialization In order to bring up secondary CPUs main CPU write trampoline code to SRAM. The trampoline code is written while secondary CPUs are powered on (at least that true for RK3188 CPU). Sometimes that leads to kernel hang. Probably because secondary CPU execute trampoline code while kernel doesn't expect. The patch moves SRAM initialization step to the point where all secondary CPUs are powered down. That fixes rarely hangs on RK3188: [ 0.091568] CPU0: thread -1, cpu 0, socket 0, mpidr 80000000 [ 0.091996] rockchip_smp_prepare_cpus: ncores 4
    Added Reference https://git.kernel.org/stable/c/0223a3683d502b7e5eb2eb4ad7e97363fa88d531
    Added Reference https://git.kernel.org/stable/c/1eb67589a7e091b1e5108aab72fddbf4dc69af2c
    Added Reference https://git.kernel.org/stable/c/265583266d93db4ff83d088819b1f63fdf0131db
    Added Reference https://git.kernel.org/stable/c/3c6bf7a324b8995b9c7d790c8d2abf0668f51551
    Added Reference https://git.kernel.org/stable/c/47769dab9073a73e127aa0bfd0ba4c51eaccdc33
    Added Reference https://git.kernel.org/stable/c/7cdb433bb44cdc87dc5260cdf15bf03cc1cd1814
    Added Reference https://git.kernel.org/stable/c/888a453c2a239765a7ab4de8a3cedae2e3802528
    Added Reference https://git.kernel.org/stable/c/c0726d1e466e2d0da620836e293a59e6427ccdff
    Added Reference https://git.kernel.org/stable/c/d7d6d076ee9532c4668f14696a35688d35dd16f4
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.
Vulnerability Scoring Details
No CVSS metrics available for this vulnerability.