CVE-2025-38705

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-38705
In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fix null pointer access Writing a string without delimiters (' ', '\n', '\0') to the under gpu_od/fan_ctrl sysfs or pp_power_profile_mode for the CUSTOM profile will result in a null pointer dereference.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/5d8cc029e5595760c7d18c64632e8e40a86a9b2e Patch
https://git.kernel.org/stable/c/a83ffafd02a7af59848755c109d544e3894af737 Patch
https://git.kernel.org/stable/c/cef79c18538e9ce2ca6e5b3fa95c38ec41dcd07a Patch
https://git.kernel.org/stable/c/d524d40e3a6152a3ea1125af729f8cd8ca65efde Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

24 Nov 2025, 19:43

Type Values Removed Values Added
First Time Linux linux Kernel
Linux
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE CWE-476
References () https://git.kernel.org/stable/c/5d8cc029e5595760c7d18c64632e8e40a86a9b2e - () https://git.kernel.org/stable/c/5d8cc029e5595760c7d18c64632e8e40a86a9b2e - Patch
References () https://git.kernel.org/stable/c/a83ffafd02a7af59848755c109d544e3894af737 - () https://git.kernel.org/stable/c/a83ffafd02a7af59848755c109d544e3894af737 - Patch
References () https://git.kernel.org/stable/c/cef79c18538e9ce2ca6e5b3fa95c38ec41dcd07a - () https://git.kernel.org/stable/c/cef79c18538e9ce2ca6e5b3fa95c38ec41dcd07a - Patch
References () https://git.kernel.org/stable/c/d524d40e3a6152a3ea1125af729f8cd8ca65efde - () https://git.kernel.org/stable/c/d524d40e3a6152a3ea1125af729f8cd8ca65efde - Patch
Information

Published : 2025-09-04 16:15

Updated : 2025-11-24 19:43

NVD link : CVE-2025-38705

Mitre link : CVE-2025-38705

CVE.ORG link : CVE-2025-38705

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference