Linux Kernel Vulnerability in CAAM for iMX8QM and iMX8ULP by ARM

CVE-2025-39722

What is CVE-2025-39722?

A vulnerability in the Linux kernel has been identified that affects the CAAM component in iMX8QM and iMX8ULP systems. This issue arises during suspend operations, where crashes can occur if page 0 is reserved by another processor core, such as the Security Controller (SECO) in iMX8QM or the Secure Enclave in iMX8ULP. A state variable called no_page0 has been introduced to monitor the reservation status of page 0, enabling a more reliable suspend/resume process. The fix addresses a specific error encountered during system suspend, improving overall system stability and performance.

References