Critical Vulnerability in Linux Kernel: Boot Data Access Issue
Summary
DEBIAN-CVE-2025-38407: In the Linux kernel, the following vulnerability has been resolved: riscv: cpu_ops_sbi: Use static array for boot_data Since commit 6b9f29b81b15 ("riscv: Enable pcpu page first chunk allocator"), if NUMA is enabled, the... Affects linux versions < 6.12.37-1. Fixed in 6.12.37-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, responsible for managing hardware resources and providing essential services to applications. It is widely used in various environments, from servers to embedded systems. This vulnerability affects the Linux kernel versions prior to 6.12.37-1, specifically in the context of RISC-V architecture with NUMA (Non-Uniform Memory Access) enabled.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the handling of boot data for RISC-V architecture. The issue arises when NUMA is enabled, leading to the use of a page percpu allocator that may result in invalid memory access. The function sbi_hsm_hart_start() incorrectly assumes that the physical address can be derived using the __pa() macro, which can lead to system hangs when a newly started hart attempts to access an invalid address. This vulnerability can disrupt system boot processes, particularly in configurations using the Sophgo SG2042 platform.
How To Fix
Minimum fixed version
6.12.37-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a workaround, users can disable NUMA support in their kernel configuration if it is not essential for their application. This can be done by setting the kernel boot parameter 'numa=off'. However, this may not be suitable for all environments, especially those that require NUMA for performance optimization.
Conclusion
The identified vulnerability in the Linux kernel poses a significant risk to systems utilizing RISC-V architecture with NUMA enabled. Users are strongly advised to update to the patched version 6.12.37-1 to mitigate potential disruptions during system boot. Additionally, utilizing tools like Vulert can help in monitoring for such vulnerabilities in the future.
See every vulnerability recorded for linux →
FAQ
The vulnerability can cause system hangs during the boot process when NUMA is enabled, particularly affecting RISC-V architecture.
You can check your kernel version using the command 'uname -r' and compare it with the patched version 6.12.37-1.
Yes, you can use Vulert, which monitors and alerts for open-source vulnerabilities in your software using a manifest file like package-lock.json.
Consider disabling NUMA support as a temporary workaround until you can apply the necessary updates.
Detailed information can be found in the official Debian CVE database or by visiting the Vulert website.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
