CVE-2025-38705

MediumCVSS 5.5/10Last modified Oct 21, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/pm: fix null pointer access

Writing a string without delimiters (' ', '\n', '\0') to the under gpu_od/fan_ctrl sysfs or pp_power_profile_mode for the CUSTOM profile will result in a null pointer dereference.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

Affected software

VendorProductVersions
LinuxLinux>= 37c5c4dbf03b167b5ca68d4bbc7fb6c92a463fb4, < 29a15e06a3d41f60a73a8a0ad7847b11c55f61bf; >= 37c5c4dbf03b167b5ca68d4bbc7fb6c92a463fb4, < a83ffafd02a7af59848755c109d544e3894af737; >= 37c5c4dbf03b167b5ca68d4bbc7fb6c92a463fb4, < 5d8cc029e5595760c7d18c64632e8e40a86a9b2e; >= 37c5c4dbf03b167b5ca68d4bbc7fb6c92a463fb4, < cef79c18538e9ce2ca6e5b3fa95c38ec41dcd07a; >= 37c5c4dbf03b167b5ca68d4bbc7fb6c92a463fb4, < d524d40e3a6152a3ea1125af729f8cd8ca65efde
LinuxLinux4.17

References

Timeline

Published
Sep 4, 2025
Last modified
Oct 21, 2026
NVD status
Modified

Related CVEs from 2025

CVE-2025-387065.5In the Linux kernel, the following vulnerability has been resolved: ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime() snd_CVE-2025-387077.8In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Add sanity check for file name The length of the file name sCVE-2025-387087.8In the Linux kernel, the following vulnerability has been resolved: drbd: add missing kref_get in handle_write_conflicts With `two-primariCVE-2025-387095.5In the Linux kernel, the following vulnerability has been resolved: loop: Avoid updating block size under exclusive owner Syzbot came up wCVE-2025-38715.3Broken access control in Fortra's GoAnywhere MFT prior to 7.8.1 allows an attacker to create a denial of service situation when configured tCVE-2025-387105.5In the Linux kernel, the following vulnerability has been resolved: gfs2: Validate i_depth for exhash directories A fuzzer test introducedCVE-2025-387115.5In the Linux kernel, the following vulnerability has been resolved: smb/server: avoid deadlock when linking with ReplaceIfExists If smb2_cCVE-2025-387125.5In the Linux kernel, the following vulnerability has been resolved: hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file() When tCVE-2025-387137.1In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() The hfsplus_CVE-2025-387147.1In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read() The hfsplus_bnCVE-2025-387157.1In the Linux kernel, the following vulnerability has been resolved: hfs: fix slab-out-of-bounds in hfs_bnode_read() This patch introduces CVE-2025-387165.5In the Linux kernel, the following vulnerability has been resolved: hfs: fix general protection fault in hfs_find_init() The hfs_find_init