CVE-2025-38152: remoteproc: core: Clear table_sz when rproc_shutdown

Published Apr 18, 2025

Updated

In the Linux kernel, the following vulnerability has been resolved:

remoteproc: core: Clear tablesz when rprocshutdown

There is case as below could trigger kernel dump: Use U-Boot to start remote processor(rproc) with resource table published to a fixed address by rproc. After Kernel boots up, stop the rproc, load a new firmware which doesn't have resource table ,and start rproc.

When starting rproc with a firmware not have resource table, memcpy(loadedtable, rproc->cachedtable, rproc->tablesz) will trigger dump, because rproc->cachetable is set to NULL during the last stop operation, but rproc->tablesz is still valid.

This issue is found on i.MX8MP and i.MX9.

Dump as below: Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 Mem abort info: ESR = 0x0000000096000004 EC = 0x25: DABT (current EL), IL = 32 bits SET = 0, FnV = 0 EA = 0, S1PTW = 0 FSC = 0x04: level 0 translation fault Data abort info: ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000 CM = 0, WnR = 0, TnD = 0, TagAccess = 0 GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 user pgtable: 4k pages, 48-bit VAs, pgdp=000000010af63000 [0000000000000000] pgd=0000000000000000, p4d=0000000000000000 Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP Modules linked in: CPU: 2 UID: 0 PID: 1060 Comm: sh Not tainted 6.14.0-rc7-next-20250317-dirty #38 Hardware name: NXP i.MX8MPlus EVK board (DT) pstate: a0000005 (NzCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : pimemcpygeneric+0x110/0x22c lr : rprocstart+0x88/0x1e0 Call trace: pimemcpygeneric+0x110/0x22c (P) rprocboot+0x198/0x57c statestore+0x40/0x104 devattrstore+0x18/0x2c sysfskfwrite+0x7c/0x94 kernfsfopwriteiter+0x120/0x1cc vfswrite+0x240/0x378 ksyswrite+0x70/0x108 arm64syswrite+0x1c/0x28 invokesyscall+0x48/0x10c el0svccommon.constprop.0+0xc0/0xe0 doel0svc+0x1c/0x28 el0svc+0x30/0xcc el0t64synchandler+0x10c/0x138 el0t64sync+0x198/0x19c

Clear rproc->tablesz to address the issue.

Affected Software

168 affected componentsFixes available

Linux Linux kernel

Linux Linux kernel>=5.13<5.15.180

Linux Linux kernel>=5.16<6.1.134

Linux Linux kernel>=6.2<6.6.87

Linux Linux kernel>=6.7<6.12.23

Linux Linux kernel>=6.13<6.13.11

Linux Linux kernel>=6.14<6.14.2

debian/linux

6.1.176-16.1.190-16.12.107-16.12.116-17.2.15-17.3.3-1

ubuntu/linux-hwe-edge*

ubuntu/linux-aws-5.0*

ubuntu/linux-aws-5.3*

ubuntu/linux-azure*

ubuntu/linux-azure-5.3*

ubuntu/linux-azure-edge*

ubuntu/linux-gcp*

ubuntu/linux-gcp-5.3*

ubuntu/linux-gke-4.15*

ubuntu/linux-gke-5.4*

ubuntu/linux-gkeop-5.4*

ubuntu/linux-hwe*

ubuntu/linux-hwe-edge*

ubuntu/linux-oem*

ubuntu/linux-oracle-5.0*

ubuntu/linux-oracle-5.3*

ubuntu/linux-aws-5.11*

ubuntu/linux-aws-5.13*

ubuntu/linux-aws-5.15<5.15.0-1086.93~20.04.1

5.15.0-1086.93~20.04.1

ubuntu/linux-aws-5.8*

ubuntu/linux-azure-5.11*

ubuntu/linux-azure-5.13*

ubuntu/linux-azure-5.15<5.15.0-1091.100~20.04.1

5.15.0-1091.100~20.04.1

ubuntu/linux-azure-5.8*

ubuntu/linux-azure-fde*

ubuntu/linux-gcp-5.11*

ubuntu/linux-gcp-5.13*

ubuntu/linux-gcp-5.15<5.15.0-1085.94~20.04.1

5.15.0-1085.94~20.04.1

ubuntu/linux-gcp-5.8*

ubuntu/linux-gke*

ubuntu/linux-gke-5.15*

ubuntu/linux-gkeop*

ubuntu/linux-gkeop-5.15*

ubuntu/linux-hwe-5.11*

ubuntu/linux-hwe-5.13*

ubuntu/linux-hwe-5.15<5.15.0-142.152~20.04.1

5.15.0-142.152~20.04.1

ubuntu/linux-hwe-5.8*

ubuntu/linux-ibm-5.15<5.15.0-1078.81~20.04.1

5.15.0-1078.81~20.04.1

ubuntu/linux-intel-5.13*

ubuntu/linux-intel-iotg-5.15<5.15.0-1083.89~20.04.1

5.15.0-1083.89~20.04.1

ubuntu/linux-lowlatency-hwe-5.15<5.15.0-142.152~20.04.1

5.15.0-142.152~20.04.1

ubuntu/linux-nvidia-tegra-5.15<5.15.0-1039.39~20.04.1

5.15.0-1039.39~20.04.1

ubuntu/linux-oem-5.10*

ubuntu/linux-oem-5.13*

ubuntu/linux-oem-5.6*

ubuntu/linux-oracle-5.11*

ubuntu/linux-oracle-5.13*

ubuntu/linux-oracle-5.15<5.15.0-1083.89~20.04.1

5.15.0-1083.89~20.04.1

ubuntu/linux-oracle-5.8*

ubuntu/linux-raspi2*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.11*

ubuntu/linux-riscv-5.15<5.15.0-1081.85~20.04.1

5.15.0-1081.85~20.04.1

ubuntu/linux-riscv-5.8*

ubuntu/linux<5.15.0-142.152

5.15.0-142.152

ubuntu/linux-allwinner-5.19*

ubuntu/linux-aws<5.15.0-1086.93

5.15.0-1086.93

ubuntu/linux-aws-5.19*

ubuntu/linux-aws-6.2*

ubuntu/linux-aws-6.5*

ubuntu/linux-aws-6.8<6.8.0-1041.43~22.04.1

6.8.0-1041.43~22.04.1

ubuntu/linux-azure<5.15.0-1091.100

5.15.0-1091.100

ubuntu/linux-azure-5.19*

ubuntu/linux-azure-6.2*

ubuntu/linux-azure-6.5*

ubuntu/linux-azure-6.8<6.8.0-1041.47~22.04.1

6.8.0-1041.47~22.04.1

ubuntu/linux-azure-fde<5.15.0-1091.100.1

5.15.0-1091.100.1

ubuntu/linux-azure-fde-5.19*

ubuntu/linux-azure-fde-6.2*

ubuntu/linux-gcp<5.15.0-1085.94

5.15.0-1085.94

ubuntu/linux-gcp-5.19*

ubuntu/linux-gcp-6.2*

ubuntu/linux-gcp-6.5*

ubuntu/linux-gcp-6.8<6.8.0-1042.45~22.04.1

6.8.0-1042.45~22.04.1

ubuntu/linux-gke<5.15.0-1083.89

5.15.0-1083.89

ubuntu/linux-gkeop<5.15.0-1068.76

5.15.0-1068.76

ubuntu/linux-hwe-5.19*

ubuntu/linux-hwe-6.2*

ubuntu/linux-hwe-6.5*

ubuntu/linux-hwe-6.8<6.8.0-86.87~22.04.1

6.8.0-86.87~22.04.1

ubuntu/linux-ibm<5.15.0-1078.81

5.15.0-1078.81

ubuntu/linux-ibm-6.8<6.8.0-1039.39~22.04.1

6.8.0-1039.39~22.04.1

ubuntu/linux-intel-iot-realtime*

ubuntu/linux-intel-iotg<5.15.0-1081.87

5.15.0-1081.87

ubuntu/linux-kvm<5.15.0-1082.87

5.15.0-1082.87

ubuntu/linux-lowlatency<5.15.0-142.152

5.15.0-142.152

ubuntu/linux-lowlatency-hwe-5.19*

ubuntu/linux-lowlatency-hwe-6.2*

ubuntu/linux-lowlatency-hwe-6.5*

ubuntu/linux-lowlatency-hwe-6.8<6.8.0-86.87.1~22.04.1

6.8.0-86.87.1~22.04.1

ubuntu/linux-nvidia<5.15.0-1080.81

5.15.0-1080.81

ubuntu/linux-nvidia-6.2*

ubuntu/linux-nvidia-6.5*

ubuntu/linux-nvidia-6.8<6.8.0-1041.44~22.04.2

6.8.0-1041.44~22.04.2

ubuntu/linux-nvidia-tegra<5.15.0-1039.39

5.15.0-1039.39

ubuntu/linux-nvidia-tegra-igx<5.15.0-1028.28

5.15.0-1028.28

ubuntu/linux-oem-5.17*

ubuntu/linux-oem-6.0*

ubuntu/linux-oem-6.1*

ubuntu/linux-oem-6.5*

ubuntu/linux-oracle<5.15.0-1083.89

5.15.0-1083.89

ubuntu/linux-oracle-6.5*

ubuntu/linux-oracle-6.8<6.8.0-1038.39~22.04.1

6.8.0-1038.39~22.04.1

ubuntu/linux-raspi<5.15.0-1080.83

5.15.0-1080.83

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.19*

ubuntu/linux-riscv-6.5*

ubuntu/linux-riscv-6.8<6.8.0-86.87~22.04.1

6.8.0-86.87~22.04.1

ubuntu/linux-starfive-5.19*

ubuntu/linux-starfive-6.2*

ubuntu/linux-starfive-6.5*

ubuntu/linux-xilinx-zynqmp<5.15.0-1050.54

5.15.0-1050.54

ubuntu/linux-bluefield<5.15.0-1069.71

5.15.0-1069.71

ubuntu/linux-intel-iot-realtime<5.15.0-1079.81

5.15.0-1079.81

ubuntu/linux-realtime<5.15.0-1086.95

5.15.0-1086.95

ubuntu/linux-realtime-6.8<6.8.1-1036.37~22.04.1

6.8.1-1036.37~22.04.1

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux-aws-fips<5.15.0-1086.93+fips1

5.15.0-1086.93+fips1

ubuntu/linux-azure-fips<5.15.0-1091.100+fips1

5.15.0-1091.100+fips1

ubuntu/linux-fips<5.15.0-142.152+fips1

5.15.0-142.152+fips1

ubuntu/linux-gcp-fips<5.15.0-1085.94+fips1

5.15.0-1085.94+fips1

ubuntu/linux<6.8.0-86.87

6.8.0-86.87

ubuntu/linux-aws<6.8.0-1041.43

6.8.0-1041.43

ubuntu/linux-azure<6.8.0-1041.47

6.8.0-1041.47

ubuntu/linux-azure-6.11<6.11.0-1018.18~24.04.1

6.11.0-1018.18~24.04.1

ubuntu/linux-azure-nvidia<6.8.0-1029.32

6.8.0-1029.32

ubuntu/linux-gcp<6.8.0-1042.45

6.8.0-1042.45

ubuntu/linux-gcp-6.11<6.11.0-1016.16~24.04.1

6.11.0-1016.16~24.04.1

ubuntu/linux-gke<6.8.0-1038.43

6.8.0-1038.43

ubuntu/linux-gkeop<6.8.0-1025.28

6.8.0-1025.28

ubuntu/linux-hwe-6.11<6.11.0-28.28~24.04.1

6.11.0-28.28~24.04.1

ubuntu/linux-ibm<6.8.0-1039.39

6.8.0-1039.39

ubuntu/linux-intel*

ubuntu/linux-lowlatency<6.8.0-86.87.1

6.8.0-86.87.1

ubuntu/linux-lowlatency-hwe-6.11<6.11.0-1015.16~24.04.2

6.11.0-1015.16~24.04.2

ubuntu/linux-nvidia<6.8.0-1041.44

6.8.0-1041.44

ubuntu/linux-nvidia-6.11<6.11.0-1012.12

6.11.0-1012.12

ubuntu/linux-nvidia-lowlatency<6.8.0-1041.44.1

6.8.0-1041.44.1

ubuntu/linux-nvidia-tegra<6.8.0-1012.12

6.8.0-1012.12

ubuntu/linux-oem-6.11<6.11.0-1024.24

6.11.0-1024.24

ubuntu/linux-oem-6.8*

ubuntu/linux-oracle<6.8.0-1038.39

6.8.0-1038.39

ubuntu/linux-raspi<6.8.0-1041.45

6.8.0-1041.45

ubuntu/linux-raspi-realtime*

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-xilinx<6.8.0-1018.19

6.8.0-1018.19

ubuntu/linux-bluefield<6.8.0-1012.16

6.8.0-1012.16

ubuntu/linux-raspi-realtime<6.8.0-2032.33

6.8.0-2032.33

ubuntu/linux-realtime<6.8.1-1036.37

6.8.1-1036.37

ubuntu/linux-aws-fips<6.8.0-1041.43+fips1

6.8.0-1041.43+fips1

ubuntu/linux-azure-fips<6.8.0-1044.50+fips1

6.8.0-1044.50+fips1

ubuntu/linux-fips<6.8.0-86.87+fips1

6.8.0-86.87+fips1

ubuntu/linux-gcp-fips<6.8.0-1042.45+fips1

6.8.0-1042.45+fips1

ubuntu/linux-azure-fde*

ubuntu/linux-vmware*

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.116-1Fixed in 7.2.15-1Fixed in 7.3.3-1
Upgrade
Upgrade ubuntu/linux-aws-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1086.93~20.04.1
Upgrade
Upgrade ubuntu/linux-azure-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1091.100~20.04.1
Upgrade
Upgrade ubuntu/linux-gcp-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1085.94~20.04.1
Upgrade
Upgrade ubuntu/linux-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-142.152~20.04.1
Upgrade
Upgrade ubuntu/linux-ibm-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1078.81~20.04.1
Upgrade
Upgrade ubuntu/linux-intel-iotg-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1083.89~20.04.1
Upgrade
Upgrade ubuntu/linux-lowlatency-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-142.152~20.04.1
Upgrade
Upgrade ubuntu/linux-nvidia-tegra-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1039.39~20.04.1
Upgrade
Upgrade ubuntu/linux-oracle-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1083.89~20.04.1
Upgrade
Upgrade ubuntu/linux-riscv-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1081.85~20.04.1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 5.15.0-142.152
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 5.15.0-1086.93
Upgrade
Upgrade ubuntu/linux-aws-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1041.43~22.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 5.15.0-1091.100
Upgrade
Upgrade ubuntu/linux-azure-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1041.47~22.04.1
Upgrade
Upgrade ubuntu/linux-azure-fde to a version that resolves this vulnerability.
Fixed in 5.15.0-1091.100.1
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 5.15.0-1085.94
Upgrade
Upgrade ubuntu/linux-gcp-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1042.45~22.04.1
Upgrade
Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.
Fixed in 5.15.0-1083.89
Upgrade
Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.
Fixed in 5.15.0-1068.76
Upgrade
Upgrade ubuntu/linux-hwe-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-86.87~22.04.1
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 5.15.0-1078.81
Upgrade
Upgrade ubuntu/linux-ibm-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1039.39~22.04.1
Upgrade
Upgrade ubuntu/linux-intel-iotg to a version that resolves this vulnerability.
Fixed in 5.15.0-1081.87
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 5.15.0-1082.87
Upgrade
Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.
Fixed in 5.15.0-142.152
Upgrade
Upgrade ubuntu/linux-lowlatency-hwe-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-86.87.1~22.04.1
Upgrade
Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.
Fixed in 5.15.0-1080.81
Upgrade
Upgrade ubuntu/linux-nvidia-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1041.44~22.04.2
Upgrade
Upgrade ubuntu/linux-nvidia-tegra to a version that resolves this vulnerability.
Fixed in 5.15.0-1039.39
Upgrade
Upgrade ubuntu/linux-nvidia-tegra-igx to a version that resolves this vulnerability.
Fixed in 5.15.0-1028.28
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 5.15.0-1083.89
Upgrade
Upgrade ubuntu/linux-oracle-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1038.39~22.04.1
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 5.15.0-1080.83
Upgrade
Upgrade ubuntu/linux-riscv-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-86.87~22.04.1
Upgrade
Upgrade ubuntu/linux-xilinx-zynqmp to a version that resolves this vulnerability.
Fixed in 5.15.0-1050.54
Upgrade
Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.
Fixed in 5.15.0-1069.71
Upgrade
Upgrade ubuntu/linux-intel-iot-realtime to a version that resolves this vulnerability.
Fixed in 5.15.0-1079.81
Upgrade
Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.
Fixed in 5.15.0-1086.95
Upgrade
Upgrade ubuntu/linux-realtime-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.1-1036.37~22.04.1
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-1086.93+fips1
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-1091.100+fips1
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-142.152+fips1
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-1085.94+fips1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 6.8.0-86.87
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 6.8.0-1041.43
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 6.8.0-1041.47
Upgrade
Upgrade ubuntu/linux-azure-6.11 to a version that resolves this vulnerability.
Fixed in 6.11.0-1018.18~24.04.1
Upgrade
Upgrade ubuntu/linux-azure-nvidia to a version that resolves this vulnerability.
Fixed in 6.8.0-1029.32
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 6.8.0-1042.45
Upgrade
Upgrade ubuntu/linux-gcp-6.11 to a version that resolves this vulnerability.
Fixed in 6.11.0-1016.16~24.04.1
Upgrade
Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.
Fixed in 6.8.0-1038.43
Upgrade
Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.
Fixed in 6.8.0-1025.28
Upgrade
Upgrade ubuntu/linux-hwe-6.11 to a version that resolves this vulnerability.
Fixed in 6.11.0-28.28~24.04.1
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 6.8.0-1039.39
Upgrade
Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.
Fixed in 6.8.0-86.87.1
Upgrade
Upgrade ubuntu/linux-lowlatency-hwe-6.11 to a version that resolves this vulnerability.
Fixed in 6.11.0-1015.16~24.04.2
Upgrade
Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.
Fixed in 6.8.0-1041.44
Upgrade
Upgrade ubuntu/linux-nvidia-6.11 to a version that resolves this vulnerability.
Fixed in 6.11.0-1012.12
Upgrade
Upgrade ubuntu/linux-nvidia-lowlatency to a version that resolves this vulnerability.
Fixed in 6.8.0-1041.44.1
Upgrade
Upgrade ubuntu/linux-nvidia-tegra to a version that resolves this vulnerability.
Fixed in 6.8.0-1012.12
Upgrade
Upgrade ubuntu/linux-oem-6.11 to a version that resolves this vulnerability.
Fixed in 6.11.0-1024.24
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 6.8.0-1038.39
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 6.8.0-1041.45
Upgrade
Upgrade ubuntu/linux-xilinx to a version that resolves this vulnerability.
Fixed in 6.8.0-1018.19
Upgrade
Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.
Fixed in 6.8.0-1012.16
Upgrade
Upgrade ubuntu/linux-raspi-realtime to a version that resolves this vulnerability.
Fixed in 6.8.0-2032.33
Upgrade
Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.
Fixed in 6.8.1-1036.37
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 6.8.0-1041.43+fips1
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 6.8.0-1044.50+fips1
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 6.8.0-86.87+fips1
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 6.8.0-1042.45+fips1
Configuration
Clear rproc->table_sz when rproc_shutdown so a subsequent firmware without a resource table does not copy from the NULL cached table.
Linux kernel remoteproc core rproc->table_sz = 0

Event History

Apr 18, 2025

CVE Published

via MITRE·07:01 AM

Data Sourced

via MITRE·07:01 AM

Description

Data Sourced

via OSV·07:15 AM

DescriptionSeverityAffected Software

Data Sourced

via NVD·07:15 AM

RemedyDescriptionSeverityWeaknessAffected Software

May 5, 2025

Data Sourced

via Microsoft·07:00 AM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

DSA-5907

Peer vulnerabilities

Found alongside the following vulnerabilities.

DLA-4193-1

Frequently Asked Questions

What is the severity of CVE-2025-38152?

CVE-2025-38152 has a moderate severity level as it can lead to a kernel dump under specific conditions.

How do I fix CVE-2025-38152?

To fix CVE-2025-38152, ensure that you update the Linux kernel to the latest stable version that includes patches for this vulnerability.

What systems are affected by CVE-2025-38152?

CVE-2025-38152 affects systems running the Linux kernel, particularly those using the remote processor feature.

What does CVE-2025-38152 entail?

CVE-2025-38152 involves a vulnerability in the Linux kernel's remoteproc component that can trigger kernel dumps when certain conditions are met.

Is CVE-2025-38152 exploitable?

CVE-2025-38152 is potentially exploitable if an attacker can control the initialization of a remote processor with specific resource table configurations.

CVE-2025-38152: remoteproc: core: Clear table_sz when rproc_shutdown

Affected Software

Remediation

Event History

Parent advisories

Peer vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2025-38152?

How do I fix CVE-2025-38152?

What systems are affected by CVE-2025-38152?

What does CVE-2025-38152 entail?

Is CVE-2025-38152 exploitable?

Company

Resources

Contact