Vulnerability in Linux

CVE-2025-71121

In the Linux kernel, the following vulnerability has been resolved: parisc: Do not reprogram affinitiy on ASP chip The ASP chip is a very old variant of the GSP chip and is used e.g. in HP 730 workstations. When trying to reprogram the affinity it will crash with a HPMC as the relevant registers don't seem to be at the usual location. Let's avoid the crash by checking the sversion. Also note, that reprogramming isn't necessary either, as the HP730 is a just a single-CPU machine.

EPSS: 0.001 (2.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.

Affected products

  • Linux — versions f77f482ec31a1f38eb38079622ca367b4b7d7442, 4.14.276, 5.17.3
  • Linux Linux_kernel — versions 5.18, 6.19

References

Frequently asked questions

What is CVE-2025-71121?
CVE-2025-71121 is a medium-severity vulnerability in Linux. CVSS score: 5.5/10. Published 2026-01-14.
How severe is CVE-2025-71121?
Medium severity. CVSS v3 base score is 5.5 out of 10.