CVE-2025-38038

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-38038
In the Linux kernel, the following vulnerability has been resolved: cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost set_boost is a per-policy function call, hence a driver wide lock is unnecessary. Also this mutex_acquire can collide with the mutex_acquire from the mode-switch path in status_store(), which can lead to a deadlock. So, remove it.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/61e931ee145eeab8196e585ff4334870b130b744 Patch
https://git.kernel.org/stable/c/cd347d071713234586762d79c5a691785e9be418 Patch
https://git.kernel.org/stable/c/db1cafc77aaaf871509da06f4a864e9af6d6791f Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

14 Nov 2025, 17:08

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: cpufreq: amd-pstate: Eliminar driver_lock innecesario en set_boost. set_boost es una llamada a función por política, por lo que no es necesario un bloqueo a nivel de controlador. Además, este mutex_acquire puede colisionar con el mutex_acquire de la ruta de cambio de modo en status_store(), lo que puede provocar un interbloqueo. Por lo tanto, elimínelo.
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/61e931ee145eeab8196e585ff4334870b130b744 - () https://git.kernel.org/stable/c/61e931ee145eeab8196e585ff4334870b130b744 - Patch
References () https://git.kernel.org/stable/c/cd347d071713234586762d79c5a691785e9be418 - () https://git.kernel.org/stable/c/cd347d071713234586762d79c5a691785e9be418 - Patch
References () https://git.kernel.org/stable/c/db1cafc77aaaf871509da06f4a864e9af6d6791f - () https://git.kernel.org/stable/c/db1cafc77aaaf871509da06f4a864e9af6d6791f - Patch
First Time Linux
Linux linux Kernel
CWE NVD-CWE-noinfo

18 Jun 2025, 10:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-06-18 10:15

Updated : 2025-11-14 17:08

NVD link : CVE-2025-38038

Mitre link : CVE-2025-38038

CVE.ORG link : CVE-2025-38038

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo