CVE-2025-38705

🗓️ 04 Sep 2025 15:32:56Reported by LinuxType

cve🔗 web.nvd.nist.gov👁 32 Views🌐 WEB

Fix null pointer in drm/amd/pm when writing to gpu_od/fan_ctrl or pp_power_profile_mode CUSTOM.

Reporter	Title	Published	Views	Family All 121
AstraLinux	Astra Linux – Vulnerability in Linux 6.12	1 Nov 202510:54	–	astralinux
BDU FSTEC	The vulnerabilities of the functions amdgpu_set_pp_power_profile_mode() and parse_input_od_commandLines() in the driver/gpu/drm/amd/pm/amdgpu_pm.c file of the Direct Rendering Infrastructure (DRI) driver for AMD graphics cards in Linux operating systems allow a malicious actor to trigger a service failure.	7 Feb 202600:00	–	bdu_fstec
Circl	CVE-2025-38705	3 Dec 202514:14	–	circl
CNNVD	Linux kernel 安全漏洞	4 Sep 202500:00	–	cnnvd
Cvelist	CVE-2025-38705 drm/amd/pm: fix null pointer access	4 Sep 202515:32	–	cvelist
Debian CVE	CVE-2025-38705	4 Sep 202515:32	–	debiancve
EUVD	EUVD-2025-26764	3 Oct 202520:07	–	euvd
Microsoft CVE	drm/amd/pm: fix null pointer access	6 Sep 202501:08	–	mscve
NVD	CVE-2025-38705	4 Sep 202516:15	–	nvd
Tenable Nessus	openSUSE 16 Security Update : kernel (openSUSE-SU-2025-20081-1)	2 Dec 202500:00	–	nessus

NVD

Vulners

CNA

Node

linux linux_kernelRange<6.12.43

linux linux_kernelRange6.13–6.15.11

linux linux_kernelRange6.16–6.16.2

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/gpu/drm/amd/pm/amdgpu_pm.c"
    ],
    "versions": [
      {
        "version": "37c5c4dbf03b167b5ca68d4bbc7fb6c92a463fb4",
        "lessThan": "a83ffafd02a7af59848755c109d544e3894af737",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "37c5c4dbf03b167b5ca68d4bbc7fb6c92a463fb4",
        "lessThan": "5d8cc029e5595760c7d18c64632e8e40a86a9b2e",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "37c5c4dbf03b167b5ca68d4bbc7fb6c92a463fb4",
        "lessThan": "cef79c18538e9ce2ca6e5b3fa95c38ec41dcd07a",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "37c5c4dbf03b167b5ca68d4bbc7fb6c92a463fb4",
        "lessThan": "d524d40e3a6152a3ea1125af729f8cd8ca65efde",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/gpu/drm/amd/pm/amdgpu_pm.c"
    ],
    "versions": [
      {
        "version": "4.17",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "4.17",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.43",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.15.11",
        "lessThanOrEqual": "6.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.16.2",
        "lessThanOrEqual": "6.16.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.17",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/5d8cc029e5595760c7d18c64632e8e40a86a9b2e
git	www.git.kernel.org/stable/c/d524d40e3a6152a3ea1125af729f8cd8ca65efde
git	www.git.kernel.org/stable/c/cef79c18538e9ce2ca6e5b3fa95c38ec41dcd07a
git	www.git.kernel.org/stable/c/a83ffafd02a7af59848755c109d544e3894af737

Parameter	Position	Path	Description	CWE
CUSTOM	path	pp_power_profile_mode	Potential null pointer dereference when writing to the pp_power_profile_mode sysfs entry under the CUSTOM profile.	CWE-476

17 Jun 2026 09:17Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.15.5

EPSS0.00145

CWE-476