CVE-2025-38705— drm/amd/pm: fix null pointer access
Possible ATT&CK Techniques 1AI
T1068 · Exploitation for Privilege EscalationAffected Version Matrix 10
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Linux | Linux | 37c5c4dbf03b167b5ca68d4bbc7fb6c92a463fb4< a83ffafd02a7af59848755c109d544e3894af737 | affected |
37c5c4dbf03b167b5ca68d4bbc7fb6c92a463fb4< 5d8cc029e5595760c7d18c64632e8e40a86a9b2e | affected | ||
37c5c4dbf03b167b5ca68d4bbc7fb6c92a463fb4< cef79c18538e9ce2ca6e5b3fa95c38ec41dcd07a | affected | ||
37c5c4dbf03b167b5ca68d4bbc7fb6c92a463fb4< d524d40e3a6152a3ea1125af729f8cd8ca65efde | affected | ||
4.17 | affected | ||
< 4.17 | unaffected | ||
6.12.43≤ 6.12.* | unaffected | ||
6.15.11≤ 6.15.* | unaffected | ||
| … +2 more rows | |||
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2025-38705
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
drm/amd/pm: fix null pointer access
Source: NVD (National Vulnerability Database)
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fix null pointer access Writing a string without delimiters (' ', '\n', '\0') to the under gpu_od/fan_ctrl sysfs or pp_power_profile_mode for the CUSTOM profile will result in a null pointer dereference.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于AMD PM未检查空指针。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2025-38705
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-38705
请登录查看更多情报信息。
Same Patch Batch · Linux · 2025-09-04 · 52 CVEs total
| CVE-2025-38693 | media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_t | |
| CVE-2025-38679 | media: venus: Fix OOB read due to missing payload bound check | |
| CVE-2025-38680 | media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() | |
| CVE-2025-38685 | fbdev: Fix vmalloc out-of-bounds write in fast_imageblit | |
| CVE-2025-38682 | i2c: core: Fix double-free of fwnode in i2c_unregister_device() | |
| CVE-2025-38683 | hv_netvsc: Fix panic during namespace deletion with VF | |
| CVE-2025-38684 | net/sched: ets: use old 'nbands' while purging unused classes | |
| CVE-2025-38681 | mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd() | |
| CVE-2025-38692 | exfat: add cluster chain loop check for dir | |
| CVE-2025-38694 | media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb() | |
| CVE-2025-38690 | drm/xe/migrate: prevent infinite recursion | |
| CVE-2025-38695 | scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure | |
| CVE-2025-38696 | MIPS: Don't crash in stack_top() for tasks without ABI or vDSO | |
| CVE-2025-38697 | jfs: upper bound check of tree index in dbAllocAG | |
| CVE-2025-38699 | scsi: bfa: Double-free fix | |
| CVE-2025-38698 | jfs: Regular file corruption check | |
| CVE-2025-38700 | scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated | |
| CVE-2025-38701 | ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr | |
| CVE-2025-38702 | fbdev: fix potential buffer overflow in do_register_framebuffer() | |
| CVE-2025-38703 | drm/xe: Make dma-fences compliant with the safe access rules |
Showing top 20 of 52 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Linux
- CVE-2026-53380
media: rzv2h-ivc: Fix concurrent buffer list access - CVE-2026-53379
media: i2c: ov8856: free control handler on error in ov8856_ - CVE-2026-53378
drm/colorop: Fix blob property reference tracking in state l - CVE-2026-53376
drm/amdkfd: Add upper bound check for num_of_nodes - CVE-2026-53377
drm/msm: always recover the gpu
Same vendor: Linux
- CVE-2026-53380
media: rzv2h-ivc: Fix concurrent buffer list access - CVE-2026-53379
media: i2c: ov8856: free control handler on error in ov8856_ - CVE-2026-53378
drm/colorop: Fix blob property reference tracking in state l - CVE-2026-53376
drm/amdkfd: Add upper bound check for num_of_nodes - CVE-2026-53377
drm/msm: always recover the gpu
V. Comments for CVE-2025-38705
No comments yet