CVE-2025-71121parisc: Do not reprogram affinitiy on ASP chip
Updated under an hour ago ()
Does this affect you?
It affects Linux and 1 other product. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: parisc: Do not reprogram affinitiy on ASP chip The ASP chip is a very old variant of the GSP chip and is used e.g. in HP 730 workstations. When trying to reprogram the affinity it will crash with a HPMC as the relevant registers don't seem to be at the usual location. Let's avoid the crash by checking the sversion. Also note, that reprogramming isn't necessary either, as the HP730 is a just a single-CPU machine.
- CVSS
- 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Analyzed
- Record last updated
- May 23, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from f7c35220305f273bddc0bdaf1e453b4ca280f145 before 845a92b74cf7a730200532ecb4482981cec9d006; from f77f482ec31a1f38eb38079622ca367b4b7d7442 before 7a146f34e5be96330467397c9fd9d3d851b2cbbe; 939fc856676c266c3bc347c1c1661872a3725c0f builds before 4d0858bbeea12a50bfb32137f74d4b74917ebadd; from 939fc856676c266c3bc347c1c1661872a3725c0f before e09fd2eb6d4c993ee9eaae556cb51e30ec1042df; from 939fc856676c266c3bc347c1c1661872a3725c0f before 60560d13ff368415c96a0c1247bea16d427c0641; from 939fc856676c266c3bc347c1c1661872a3725c0f before c8f810e20f4bbe50b49f73429d9fa6efad00623e; from 939fc856676c266c3bc347c1c1661872a3725c0f before dca7da244349eef4d78527cafc0bf80816b261f5; 52b66c46bb9f5fb270673327c41dec50171939c1; and 11 more ranges | CNA record |
linux linux_kernel linux:linux_kernel | from 4.14.276 before 4.15; from 4.19.238 before 4.20; from 5.4.189 before 5.5; from 5.10.111 before 5.10.248; from 5.15.34 before 5.15.198; from 5.16.20 before 5.17; from 5.17.3 before 5.18; from 5.18.1 before 6.1.160; and 12 more ranges | NVD |
References
- https://git.kernel.org/stable/c/845a92b74cf7a730200532ecb4482981cec9d006patch
- https://git.kernel.org/stable/c/7a146f34e5be96330467397c9fd9d3d851b2cbbepatch
- https://git.kernel.org/stable/c/4d0858bbeea12a50bfb32137f74d4b74917ebaddpatch
- https://git.kernel.org/stable/c/e09fd2eb6d4c993ee9eaae556cb51e30ec1042dfpatch
- https://git.kernel.org/stable/c/60560d13ff368415c96a0c1247bea16d427c0641patch
- https://git.kernel.org/stable/c/c8f810e20f4bbe50b49f73429d9fa6efad00623epatch
- https://git.kernel.org/stable/c/dca7da244349eef4d78527cafc0bf80816b261f5patch
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.