CVE-2025-38705CWE-476

CVE-2025-38705

Medium · published September 4, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
4.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/pm: fix null pointer access

Writing a string without delimiters (' ', '\n', '\0') to the under

gpu_od/fan_ctrl sysfs or pp_power_profile_mode for the CUSTOM profile

will result in a null pointer dereference.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00159 · 4.7th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2025-09-04T20:15Z
Affected products (3)
ProductVersionsFixed in
linux/linux_kernel< 6.12.436.12.43
linux/linux_kernel≥ 6.13, < 6.15.116.15.11
linux/linux_kernel≥ 6.16, < 6.16.26.16.2
References (5)
EPSS history
Timeline
  • 04 SEP 15:32Z
    drm/amd/pm: fix null pointer access
    cvelistv5