CVE-2025-39681

Source
https://cve.org/CVERecord?id=CVE-2025-39681
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-39681.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-39681
Downstream
Related
Published
2025-09-05T17:20:47.564Z
Modified
2026-03-20T12:43:00.202059Z
Summary
x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper
Details

In the Linux kernel, the following vulnerability has been resolved:

x86/cpu/hygon: Add missing resctrlcpudetect() in bsp_init helper

Since

923f3a2b48bd ("x86/resctrl: Query LLC monitoring properties once during boot")

resctrlcpudetect() has been moved from common CPU initialization code to the vendor-specific BSP init helper, while Hygon didn't put that call in their code.

This triggers a division by zero fault during early booting stage on our machines with X86FEATURECQM* supported, where getrdtmonresources() tries to calculate monl3config with uninitialized bootcpudata.x86cacheoccscale.

Add the missing resctrlcpudetect() in the Hygon BSP init helper.

[ bp: Massage commit message. ]

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/39xxx/CVE-2025-39681.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
923f3a2b48bdccb6a1d1f0dd48de03de7ad936d9
Fixed
62f12cde10118253348a7540e85606869bd69432
Fixed
873f32201df8876bdb2563e3187e79149427cab4
Fixed
fb81222c1559f89bfe3aa1010f6d112531d55353
Fixed
7207923d8453ebfb35667c1736169f2dd796772e
Fixed
a9e5924daa954c9f585c1ca00358afe71d6781c4
Fixed
d23264c257a70dbe021b43b3bc2ee16134cd2c69
Fixed
d8df126349dad855cdfedd6bbf315bad2e901c2f

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-39681.json"