System Hang Vulnerability in Linux Kernel: S4 Resume with FRED Enabled
Summary
DEBIAN-CVE-2025-38047: In the Linux kernel, the following vulnerability has been resolved: x86/fred: Fix system hang during S4 resume with FRED enabled Upon a wakeup from S4, the restore kernel starts and initializes the FRED MSRs as needed fr... Affects linux versions < 6.12.32-1. Fixed in 6.12.32-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. It is widely used across various distributions, including Debian. This vulnerability affects the Linux kernel versions in Debian 13 and 14, specifically related to the handling of FRED (Fast Restore and Enhanced Debug) during system hibernation and resume processes.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified that causes a system hang during the S4 resume process when FRED is enabled. Upon waking from S4, the restore kernel initializes the FRED MSRs (Model-Specific Registers) but may not correctly align these values with those set by the image kernel before hibernation. This discrepancy can lead to system instability and hangs, as the image kernel takes control without ensuring the FRED MSRs are properly configured.
How To Fix
Minimum fixed version
6.12.32-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, no specific workarounds are provided for this vulnerability. Users are advised to apply the patch as soon as it is available to mitigate the risk of system hangs during the S4 resume process.
Conclusion
The vulnerability identified in the Linux kernel regarding the S4 resume process with FRED enabled poses a significant risk of system hangs. Users are strongly encouraged to update to the patched version 6.12.32-1 to mitigate this issue and ensure system stability.
See every vulnerability recorded for linux →
FAQ
The vulnerability can cause the system to hang during the S4 resume process, leading to potential data loss and requiring a hard reset.
The vulnerability affects Linux kernel versions prior to 6.12.32-1 in Debian 13 and 14.
You can use tools like Vulert to monitor and alert for open-source vulnerabilities in your software. Check your application against the vulnerability using the Vulert playground.
Currently, there are no specific workarounds available. It is recommended to apply the patch as soon as it is released.
FRED stands for Fast Restore and Enhanced Debug, which is a feature in the Linux kernel that helps manage system states during hibernation and resume processes.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
