Medium 5.5Published Sep 11, 2025

CVE-2025-39752ARM: rockchip: fix kernel hang during smp initialization

Updated under an hour ago (Oct 26, 2026, 2:30 PM ET)

Does this affect you?

It affects Linux and 3 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: ARM: rockchip: fix kernel hang during smp initialization In order to bring up secondary CPUs main CPU write trampoline code to SRAM. The trampoline code is written while secondary CPUs are powered on (at least that true for RK3188 CPU). Sometimes that leads to kernel hang. Probably because secondary CPU execute trampoline code while kernel doesn't expect. The patch moves SRAM initialization step to the point where all secondary CPUs are powered down. That fixes rarely hangs on RK3188: [ 0.091568] CPU0: thread -1, cpu 0, socket 0, mpidr 80000000 [ 0.091996] rockchip_smp_prepare_cpus: ncores 4

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: May 12, 2026
First seen by InfoSec Signals: Oct 19, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	3ee851e212d0bb6be8c462059fba74ce2e3f6064 builds before 3c6bf7a324b8995b9c7d790c8d2abf0668f51551; from 3ee851e212d0bb6be8c462059fba74ce2e3f6064 before 888a453c2a239765a7ab4de8a3cedae2e3802528; from 3ee851e212d0bb6be8c462059fba74ce2e3f6064 before c0726d1e466e2d0da620836e293a59e6427ccdff; from 3ee851e212d0bb6be8c462059fba74ce2e3f6064 before 265583266d93db4ff83d088819b1f63fdf0131db; from 3ee851e212d0bb6be8c462059fba74ce2e3f6064 before d7d6d076ee9532c4668f14696a35688d35dd16f4; from 3ee851e212d0bb6be8c462059fba74ce2e3f6064 before 0223a3683d502b7e5eb2eb4ad7e97363fa88d531; from 3ee851e212d0bb6be8c462059fba74ce2e3f6064 before 47769dab9073a73e127aa0bfd0ba4c51eaccdc33; 3ee851e212d0bb6be8c462059fba74ce2e3f6064 builds before 1eb67589a7e091b1e5108aab72fddbf4dc69af2c; and 1 more ranges	CNA record
Siemens SIMATIC CN 4100 siemens:simatic_cn_4100 (from the name)	before V5.0	CISA ADP
linux linux_kernel linux:linux_kernel	from 3.19 before 5.4.297; from 5.5 before 5.10.241; from 5.11 before 5.15.190; from 5.16 before 6.1.149; from 6.2 before 6.6.103; from 6.7 before 6.12.43; from 6.13 before 6.15.11; from 6.16 before 6.16.2	NVD
debian debian_linux debian:debian_linux	11.0	NVD

References

References

https://git.kernel.org/stable/c/3c6bf7a324b8995b9c7d790c8d2abf0668f51551	patch
https://git.kernel.org/stable/c/888a453c2a239765a7ab4de8a3cedae2e3802528	patch
https://git.kernel.org/stable/c/c0726d1e466e2d0da620836e293a59e6427ccdff	patch
https://git.kernel.org/stable/c/265583266d93db4ff83d088819b1f63fdf0131db	patch
https://git.kernel.org/stable/c/d7d6d076ee9532c4668f14696a35688d35dd16f4	patch
https://git.kernel.org/stable/c/0223a3683d502b7e5eb2eb4ad7e97363fa88d531	patch
https://git.kernel.org/stable/c/47769dab9073a73e127aa0bfd0ba4c51eaccdc33	patch
https://git.kernel.org/stable/c/1eb67589a7e091b1e5108aab72fddbf4dc69af2c	patch
https://git.kernel.org/stable/c/7cdb433bb44cdc87dc5260cdf15bf03cc1cd1814	patch
https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html	mailing-list, third-party-advisory
1–10 of 12

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.