Memory Management Vulnerability in i.MX8MP and i.MX9 by NXP

CVE-2025-38152

Summary

A vulnerability has been identified in the Linux kernel affecting the NXP i.MX8MP and i.MX9 processors. The issue arises when a remote processor (rproc) is started with a firmware that lacks a resource table, leading to potential kernel dumps during operation. Specifically, during the rproc shutdown, the cached resource table is set to NULL, but the corresponding table size remains valid. This misalignment triggers a kernel NULL pointer dereference when an attempt is made to perform a memory copy operation. This flaw can compromise system stability and reliability, necessitating immediate attention from developers and system administrators.

References