{
  "cveId": "CVE-2025-38295",
  "url": "https://patchblox.com/security/cve/CVE-2025-38295",
  "summary": "CVE-2025-38295 is fixed in linux on 1 platform, first by DEBIAN-CVE-2025-38295, released July 10, 2025. It is not reported as exploited. Patch Radar priority: High.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  perf/amlogic: Replace smp_processor_id() with ra...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  perf/amlogic: Replace smp_processor_id() with raw_smp_processor_id() in meson_ddr_pmu_create()  The Amlogic DDR PMU driver meson_ddr_pmu_create() function incorrectly uses smp_processor_id(), which assumes disabled preemption. This leads to kernel warnings during module loading because meson_ddr_pmu_create() can be called in a preemptible context.  Following kernel warning and stack trace: [   31.745138] [   T2289] BUG: using smp_processor_id() in preemptible [00000000] code: (udev-worker)/2289 [   31.745154] [   T2289] caller is debug_smp_processor_id\u002B0x28/0x38 [   31.745172] [   T2289] CPU: 4 UID: 0 PID: 2289 Comm: (udev-worker) Tainted: GW 6.14.0-0-MANJARO-ARM #1 59519addcbca6ba8de735e151fd7b9e97aac7ff0 [   31.745181] [   T2289] Tainted: [W]=WARN [   31.745183] [   T2289] Hardware name: Hardkernel ODROID-N2Plus (DT) [   31.745188] [   T2289] Call trace: [   31.745191] [   T2289]  show_stack\u002B0x28/0x40 (C) [   31.745199] [   T2289]  dump_stack_lvl\u002B0x4c/0x198 [   31.745205] [   T2289]  dump_stack\u002B0x20/0x50 [   31.745209] [   T2289]  check_preemption_disabled\u002B0xec/0xf0 [   31.745213] [   T2289]  debug_smp_processor_id\u002B0x28/0x38 [   31.745216] [   T2289]  meson_ddr_pmu_create\u002B0x200/0x560 [meson_ddr_pmu_g12 8095101c49676ad138d9961e3eddaee10acca7bd] [   31.745237] [   T2289]  g12_ddr_pmu_probe\u002B0x20/0x38 [meson_ddr_pmu_g12 8095101c49676ad138d9961e3eddaee10acca7bd] [   31.745246] [   T2289]  platform_probe\u002B0x98/0xe0 [   31.745254] [   T2289]  really_probe\u002B0x144/0x3f8 [   31.745258] [   T2289]  __driver_probe_device\u002B0xb8/0x180 [   31.745261] [   T2289]  driver_probe_device\u002B0x54/0x268 [   31.745264] [   T2289]  __driver_attach\u002B0x11c/0x288 [   31.745267] [   T2289]  bus_for_each_dev\u002B0xfc/0x160 [   31.745274] [   T2289]  driver_attach\u002B0x34/0x50 [   31.745277] [   T2289]  bus_add_driver\u002B0x160/0x2b0 [   31.745281] [   T2289]  driver_register\u002B0x78/0x120 [   31.745285] [   T2289]  __platform_driver_register\u002B0x30/0x48 [   31.745288] [   T2289]  init_module\u002B0x30/0xfe0 [meson_ddr_pmu_g12 8095101c49676ad138d9961e3eddaee10acca7bd] [   31.745298] [   T2289]  do_one_initcall\u002B0x11c/0x438 [   31.745303] [   T2289]  do_init_module\u002B0x68/0x228 [   31.745311] [   T2289]  load_module\u002B0x118c/0x13a8 [   31.745315] [   T2289]  __arm64_sys_finit_module\u002B0x274/0x390 [   31.745320] [   T2289]  invoke_syscall\u002B0x74/0x108 [   31.745326] [   T2289]  el0_svc_common\u002B0x90/0xf8 [   31.745330] [   T2289]  do_el0_svc\u002B0x2c/0x48 [   31.745333] [   T2289]  el0_svc\u002B0x60/0x150 [   31.745337] [   T2289]  el0t_64_sync_handler\u002B0x80/0x118 [   31.745341] [   T2289]  el0t_64_sync\u002B0x1b8/0x1c0  Changes replaces smp_processor_id() with raw_smp_processor_id() to ensure safe CPU ID retrieval in preemptible contexts.",
  "published": "2025-07-10T08:15:28Z",
  "severity": "high",
  "cvss": 7.8,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "epss": 0.00185,
  "epssPercentile": 0.08162,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.12.35-1",
      "fix": "DEBIAN-CVE-2025-38295",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-38295",
      "released": "2025-07-10T08:15:28Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.12.35-1",
      "fix": "DEBIAN-CVE-2025-38295",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-38295",
      "released": "2025-07-10T08:15:28Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T19:12:23Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}