PT-2025-25822 · Linux+5 · Linux Kernel+5

Published 2025-04-01 · Updated 2026-04-20 · CVE-2025-38047

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A system hang issue during S4 resume with FRED enabled has been resolved in the Linux kernel. The problem occurs when the restore kernel and the image kernel have different values set for the FRED MSRs. To fix this, the image kernel must recompute the FRED MSRs from scratch based on the location of the kernel text and data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Improper Initialization

Weakness Enumeration

CWE-20

CWE-665

Related Identifiers

BDU:2025-08790

CVE-2025-38047

ECHO-7A8A-5513-4935

SUSE-SU-2025:02853-1

SUSE-SU-2025:02997-1

SUSE-SU-2025:03011-1

SUSE-SU-2025_02853-1

SUSE-SU-2025_02997-1

SUSE-SU-2025_03011-1

USN-7769-1

USN-7769-2

USN-7769-3

USN-7770-1

USN-7771-1

USN-7789-1

USN-7789-2

Affected Products

Astra Linux

Debian

Linuxmint

Linux Kernel

Suse

Ubuntu

References · 808

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38047.json · Exploit
• https://ubuntu.com/security/CVE-2025-38145 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38065 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38117 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38044 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38414 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38141 · Vendor Advisory
• https://git.kernel.org/stable/c/e7090fe75a2826363c71ad1fb4e95e58141478df · Patch
• https://ubuntu.com/security/CVE-2025-38159 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38074 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-38047 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38037 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38168 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38317 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38147 · Vendor Advisory