CVE-2025-39752: 
Linux Kernel vulnerability analysis and mitigation

CVE-2025-39752 is a vulnerability discovered in the Linux kernel affecting the ARM Rockchip SMP initialization process. The vulnerability was disclosed on September 11, 2025, and involves issues with trampoline code execution during secondary CPU initialization (NVD Database).

The vulnerability occurs during the SMP (Symmetric Multi-Processing) initialization process on Rockchip ARM processors. When bringing up secondary CPUs, the main CPU writes trampoline code to SRAM while secondary CPUs are powered on. This can lead to kernel hangs, particularly on RK3188 CPUs, as secondary CPUs may execute the trampoline code at unexpected times (NVD Database).

The vulnerability can cause system instability and kernel hangs during the boot process, particularly affecting systems using RK3188 processors. This can result in system unavailability and potential disruption of services (NVD Database).

A patch has been developed that moves the SRAM initialization step to a point where all secondary CPUs are powered down, preventing the unexpected execution of trampoline code. This fix has been specifically verified to resolve the hanging issues on RK3188 processors (NVD Database).