Kernel Vulnerability in Linux Affecting RISC-V Architecture by Sophgo

CVE-2025-38407

What is CVE-2025-38407?

A vulnerability in the Linux kernel's RISC-V architecture can disrupt the NUMA boot process on Sophgo's SG2042. This issue arises when the page percpu allocator is unexpectedly utilized during sparse configurations, which leads to the improper assumption of the physical address for the boot data. As a result, certain CPUs may attempt to access invalid memory addresses, causing them to hang during the boot sequence. A fix has been implemented by statically allocating an array for boot data, thus preventing these invalid accesses and ensuring a successful NUMA-enabled SMP boot.

References