Bug 2373316 (CVE-2025-38047) - CVE-2025-38047 kernel: x86/fred: Fix system hang during S4 resume with FRED enabled
Summary: CVE-2025-38047 kernel: x86/fred: Fix system hang during S4 resume with FRED e...
Keywords:
Status: NEW
Alias: CVE-2025-38047
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2025-06-18 10:01 UTC by OSIDB Bzimport
Modified: 2025-06-18 12:53 UTC (History)
4 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2025-06-18 10:01:11 UTC
In the Linux kernel, the following vulnerability has been resolved:

x86/fred: Fix system hang during S4 resume with FRED enabled

Upon a wakeup from S4, the restore kernel starts and initializes the
FRED MSRs as needed from its perspective.  It then loads a hibernation
image, including the image kernel, and attempts to load image pages
directly into their original page frames used before hibernation unless
those frames are currently in use.  Once all pages are moved to their
original locations, it jumps to a "trampoline" page in the image kernel.

At this point, the image kernel takes control, but the FRED MSRs still
contain values set by the restore kernel, which may differ from those
set by the image kernel before hibernation.  Therefore, the image kernel
must ensure the FRED MSRs have the same values as before hibernation.
Since these values depend only on the location of the kernel text and
data, they can be recomputed from scratch.

Comment 1 Mauro Matteo Cascella 2025-06-18 12:37:19 UTC
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025061830-CVE-2025-38047-ad81@gregkh/T


Note You need to log in before you can comment on or make changes to this bug.