CVE-2025-38047: 
Linux Kernel vulnerability analysis and mitigation

A vulnerability in the Linux kernel has been identified and assigned CVE-2025-38047, specifically affecting the x86/fred component during S4 resume operations with FRED enabled. The issue was disclosed on June 18, 2025, and involves system hang conditions during the S4 resume process (NVD).

The vulnerability occurs when the system wakes up from S4 sleep state. During this process, the restore kernel initializes FRED MSRs (Model-Specific Registers) and loads a hibernation image. The issue arises when the image kernel takes control, as the FRED MSRs still contain values set by the restore kernel, which may differ from those set by the image kernel before hibernation. The vulnerability manifests in the handling of these MSR values during the transition between restore and image kernels (NVD).

When exploited, this vulnerability can cause a system hang during the S4 resume process on systems with FRED enabled. This primarily affects system availability by preventing successful resume operations from hibernation (NVD).

The vulnerability has been resolved in the Linux kernel. The fix involves ensuring that the image kernel recomputes the FRED MSR values from scratch upon resuming, as these values depend only on the location of the kernel text and data (NVD).