CVE Database
/

CVE-2025-39763

Back to search

CVE-2025-39763

Published: Sep 11, 2025

Modified: May 23, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered If a synchronous error is detected as a result of user-space process triggering a 2-bit uncorrected error, the CPU will take a synchronous error exception such as Synchronous External Abort (SEA) on Arm64. The kernel will queue a memory_failure() work which poisons the related page, unmaps the page, and then sends a SIGBUS to the process, so that a system wide panic can be avoided. However, no memory_failure() work will be queued when abnormal synchronous errors occur. These errors can include situations like invalid PA, unexpected severity, no memory failure config support, invalid GUID section, etc. In such a case, the user-space process will trigger SEA again. This loop can potentially exceed the platform firmware threshold or even trigger a kernel hard lockup, leading to a system reboot. Fix it by performing a force kill if no memory_failure() work is queued for synchronous errors. [ rjw: Changelog edits ]

VendorProductVersions

Linux

Linux

affected
8fcc4ae6faf8b455eeef00bc9ae70744e3b0f462 - < 2fbc85da9ac9386bd89fcc94e0aadaea19d47784
affected
8fcc4ae6faf8b455eeef00bc9ae70744e3b0f462 - < 082735fbcdb6cd0cf20fbec94516ab2996f1cdd5
affected
8fcc4ae6faf8b455eeef00bc9ae70744e3b0f462 - < cfc9bc15bda6fd0c496cbe2c628564d4d7c332c1
affected
8fcc4ae6faf8b455eeef00bc9ae70744e3b0f462 - < af089e41811a1ad6a7b2b80e839a73ec4c3cecdd
affected
8fcc4ae6faf8b455eeef00bc9ae70744e3b0f462 - < 3cb4f18797247985b0f51d5300f8cb6c78f343ea

+3 more versions

Linux

Linux

affected
5.8
unaffected
0 - < 5.8
unaffected
6.1.164 - <= 6.1.*
unaffected
6.6.103 - <= 6.6.*
unaffected
6.12.43 - <= 6.12.*

+3 more versions

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now