CVE-2025-39681

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2025-09-05 Modified: 2026-11-10 First seen: 2026-11-05 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper Since 923f3a2b48bd ("x86/resctrl: Query LLC monitoring properties once during boot") resctrl_cpu_detect() has been moved from common CPU initialization code to the vendor-specific BSP init helper, while Hygon didn't put that call in their code. This triggers a division by zero fault during early booting stage on our machines with X86_FEATURE_CQM* supported, where get_rdt_mon_resources() tries to calculate mon_l3_config with uninitialized boot_cpu_data.x86_cache_occ_scale. Add the missing resctrl_cpu_detect() in the Hygon BSP init helper. [ bp: Massage commit message. ]

Affected Software (20)

VendorProductVersion
Linux Linux 923f3a2b48bdccb6a1d1f0dd48de03de7ad936d9 < 62f12cde10118253348a7540e85606869bd69432
Linux Linux 923f3a2b48bdccb6a1d1f0dd48de03de7ad936d9 < 873f32201df8876bdb2563e3187e79149427cab4
Linux Linux 923f3a2b48bdccb6a1d1f0dd48de03de7ad936d9 < fb81222c1559f89bfe3aa1010f6d112531d55353
Linux Linux 923f3a2b48bdccb6a1d1f0dd48de03de7ad936d9 < 7207923d8453ebfb35667c1736169f2dd796772e
Linux Linux 923f3a2b48bdccb6a1d1f0dd48de03de7ad936d9 < a9e5924daa954c9f585c1ca00358afe71d6781c4
Linux Linux 923f3a2b48bdccb6a1d1f0dd48de03de7ad936d9 < d23264c257a70dbe021b43b3bc2ee16134cd2c69
Linux Linux 923f3a2b48bdccb6a1d1f0dd48de03de7ad936d9 < d8df126349dad855cdfedd6bbf315bad2e901c2f
Linux Linux 5.8
Linux Linux 923f3a2b48bdccb6a1d1f0dd48de03de7ad936d9 < 62f12cde10118253348a7540e85606869bd69432
Linux Linux 923f3a2b48bdccb6a1d1f0dd48de03de7ad936d9 < 873f32201df8876bdb2563e3187e79149427cab4
Linux Linux 923f3a2b48bdccb6a1d1f0dd48de03de7ad936d9 < fb81222c1559f89bfe3aa1010f6d112531d55353
Linux Linux 923f3a2b48bdccb6a1d1f0dd48de03de7ad936d9 < 7207923d8453ebfb35667c1736169f2dd796772e
Linux Linux 923f3a2b48bdccb6a1d1f0dd48de03de7ad936d9 < a9e5924daa954c9f585c1ca00358afe71d6781c4
Linux Linux 923f3a2b48bdccb6a1d1f0dd48de03de7ad936d9 < d23264c257a70dbe021b43b3bc2ee16134cd2c69
Linux Linux 923f3a2b48bdccb6a1d1f0dd48de03de7ad936d9 < d8df126349dad855cdfedd6bbf315bad2e901c2f
Linux Linux 5.8
debian debian_linux 11.0
linux linux_kernel 5.8 – 5.10.242
linux linux_kernel 6.17
linux linux_kernel 6.17

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.18%
Raw Score 0.001830
Percentile 8.0%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00183
2026-11-12
0.00183
2026-11-10
0.00183
2026-11-09
0.00183
2026-11-08
0.00183
2026-11-07
0.00183
2026-11-06
0.00183
2026-11-05
0.00183

Intelligence Sources

mitre ref →
nvd ref →