What’s Vulnerable › Vulnerabilities

CVE-2025-71121: parisc: Do not reprogram affinitiy on ASP chip

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-01-14 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: parisc: Do not reprogram affinitiy on ASP chip The ASP chip is a very old variant of the GSP chip and is used e.g. in HP 730 workstations. When trying to reprogram the affinity it will crash with a HPMC as the relevant registers don't seem to be at the usual location. Let's avoid the crash by checking the sversion. Also note, that reprogramming isn't necessary either, as the HP730 is a just a single-CPU machine.

Affected products

• Linux kernel: from 4.14.276 before 4.15; from 4.19.238 before 4.20; from 5.4.189 before 5.5; from 5.10.111 before 5.10.248; from 5.15.34 before 5.15.198; from 5.16.20 before 5.17 — fixed in 4.15, 4.20, 5.10.248, 5.15.198, 5.17, 5.18

How to fix

Upgrade to a fixed version: Linux kernel 4.15, 4.20, 5.10.248, 5.15.198. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/4d0858bbeea12a50bfb32137f74d4b74917ebadd
• https://git.kernel.org/stable/c/60560d13ff368415c96a0c1247bea16d427c0641
• https://git.kernel.org/stable/c/7a146f34e5be96330467397c9fd9d3d851b2cbbe
• https://git.kernel.org/stable/c/845a92b74cf7a730200532ecb4482981cec9d006
• https://git.kernel.org/stable/c/c8f810e20f4bbe50b49f73429d9fa6efad00623e
• https://git.kernel.org/stable/c/dca7da244349eef4d78527cafc0bf80816b261f5
• https://git.kernel.org/stable/c/e09fd2eb6d4c993ee9eaae556cb51e30ec1042df

Get alerted when CVE-2025-71121 or the next vulnerability affects your stack