{"id":"CVE-2025-39763","title":"ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered\n\nIf a synchronous error is detected as a result of user-space process\ntriggering a 2-b…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 8fcc4ae6faf8b455eeef00bc9ae70744e3b0f462 < 2fbc85da9ac9386bd89fcc94e0aadaea19d47784","Linux >= 8fcc4ae6faf8b455eeef00bc9ae70744e3b0f462 < 082735fbcdb6cd0cf20fbec94516ab2996f1cdd5","Linux >= 8fcc4ae6faf8b455eeef00bc9ae70744e3b0f462 < cfc9bc15bda6fd0c496cbe2c628564d4d7c332c1","Linux >= 8fcc4ae6faf8b455eeef00bc9ae70744e3b0f462 < af089e41811a1ad6a7b2b80e839a73ec4c3cecdd","Linux >= 8fcc4ae6faf8b455eeef00bc9ae70744e3b0f462 < 3cb4f18797247985b0f51d5300f8cb6c78f343ea","Linux >= 8fcc4ae6faf8b455eeef00bc9ae70744e3b0f462 < 79a5ae3c4c5eb7e38e0ebe4d6bf602d296080060","Linux af02933d59bd1621a48d8b0b331cca9e530ba14b","Linux >= 5.4.69 < 5.5","Linux 5.8"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-05T21:10:59.269892Z"},"published":"2025-09-11","updated":"2026-11-05","sourceUpdated":"2026-11-05T21:12:57.142Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-39763","references":[{"url":"https://git.kernel.org/stable/c/2fbc85da9ac9386bd89fcc94e0aadaea19d47784"},{"url":"https://git.kernel.org/stable/c/082735fbcdb6cd0cf20fbec94516ab2996f1cdd5"},{"url":"https://git.kernel.org/stable/c/cfc9bc15bda6fd0c496cbe2c628564d4d7c332c1"},{"url":"https://git.kernel.org/stable/c/af089e41811a1ad6a7b2b80e839a73ec4c3cecdd"},{"url":"https://git.kernel.org/stable/c/3cb4f18797247985b0f51d5300f8cb6c78f343ea"},{"url":"https://git.kernel.org/stable/c/79a5ae3c4c5eb7e38e0ebe4d6bf602d296080060"}],"tags":["cve.org"],"epss":0.0016,"epssPercentile":0.05166,"ingestedAt":"2026-11-05T22:38:32.035Z","slug":"CVE-2025-39763","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered\n\nIf a synchronous error is detected as a result of user-space process\ntriggering a 2-bit uncorrected error, the CPU will take a synchronous\nerror exception such as Synchronous External Abort (SEA) on Arm64. The\nkernel will queue a memory_failure() work which poisons the related\npage, unmaps the page, and then sends a SIGBUS to the process, so that\na system wide panic can be avoided.\n\nHowever, no memory_failure() work will be queued when abnormal\nsynchronous errors occur. These errors can include situations like\ninvalid PA, unexpected severity, no memory failure config support,\ninvalid GUID section, etc. In such a case, the user-space process will\ntrigger SEA again.  This loop can potentially exceed the platform\nfirmware threshold or even trigger a kernel hard lockup, leading to a\nsystem reboot.\n\nFix it by performing a force kill if no memory_failure() work is queued\nfor synchronous errors.\n\n[ rjw: Changelog edits ]\n\n## Affected\n\n- `Linux >= 8fcc4ae6faf8b455eeef00bc9ae70744e3b0f462 < 2fbc85da9ac9386bd89fcc94e0aadaea19d47784`\n- `Linux >= 8fcc4ae6faf8b455eeef00bc9ae70744e3b0f462 < 082735fbcdb6cd0cf20fbec94516ab2996f1cdd5`\n- `Linux >= 8fcc4ae6faf8b455eeef00bc9ae70744e3b0f462 < cfc9bc15bda6fd0c496cbe2c628564d4d7c332c1`\n- `Linux >= 8fcc4ae6faf8b455eeef00bc9ae70744e3b0f462 < af089e41811a1ad6a7b2b80e839a73ec4c3cecdd`\n- `Linux >= 8fcc4ae6faf8b455eeef00bc9ae70744e3b0f462 < 3cb4f18797247985b0f51d5300f8cb6c78f343ea`\n- `Linux >= 8fcc4ae6faf8b455eeef00bc9ae70744e3b0f462 < 79a5ae3c4c5eb7e38e0ebe4d6bf602d296080060`\n- `Linux af02933d59bd1621a48d8b0b331cca9e530ba14b`\n- `Linux >= 5.4.69 < 5.5`\n- `Linux 5.8`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}