CVE-2025-38047

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
18/06/2025
Last modified:
14/11/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> x86/fred: Fix system hang during S4 resume with FRED enabled<br /> <br /> Upon a wakeup from S4, the restore kernel starts and initializes the<br /> FRED MSRs as needed from its perspective. It then loads a hibernation<br /> image, including the image kernel, and attempts to load image pages<br /> directly into their original page frames used before hibernation unless<br /> those frames are currently in use. Once all pages are moved to their<br /> original locations, it jumps to a "trampoline" page in the image kernel.<br /> <br /> At this point, the image kernel takes control, but the FRED MSRs still<br /> contain values set by the restore kernel, which may differ from those<br /> set by the image kernel before hibernation. Therefore, the image kernel<br /> must ensure the FRED MSRs have the same values as before hibernation.<br /> Since these values depend only on the location of the kernel text and<br /> data, they can be recomputed from scratch.

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.9 (including) 6.12.31 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.13 (including) 6.14.9 (excluding)