Kernel Vulnerability in Linux Affecting Pine64 RockPro64 Devices

CVE-2025-39895

What is CVE-2025-39895?

A vulnerability in the Linux kernel occurs within the sched_numa_find_nth_cpu() function, which improperly handles scenarios where all CPUs specified in the mask are offline. This oversight can result in a kernel panic and system instability when the system is booted with specific configurations, particularly on devices like Pine64 RockPro64. The bug is triggered under conditions such as using maxcpus=4 with all high-performance CPUs offline, leading to potential data corruption and service interruptions.

References