CVE-2025-38041

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2025-06-18 Modified: 2026-10-30 First seen: 2026-10-30 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: clk: sunxi-ng: h616: Reparent GPU clock during frequency changes The H616 manual does not state that the GPU PLL supports dynamic frequency configuration, so we must take extra care when changing the frequency. Currently any attempt to do device DVFS on the GPU lead to panfrost various ooops, and GPU hangs. The manual describes the algorithm for changing the PLL frequency, which the CPU PLL notifier code already support, so we reuse that to reparent the GPU clock to GPU1 clock during frequency changes.

Affected Software (7)

VendorProductVersion
Linux Linux 88dde5e23da1a16fe9a417171e6c941736b8d3a6 < 5b447255bf170aee508d50c4a3a1156eb6dcc9b4
Linux Linux 88dde5e23da1a16fe9a417171e6c941736b8d3a6 < 47a0da0c80749767de1bc0a7a27a69b34c22fbda
Linux Linux 88dde5e23da1a16fe9a417171e6c941736b8d3a6 < 0c4f89f02c72f7cfb98a9a09cae89cc2e39e6017
Linux Linux 88dde5e23da1a16fe9a417171e6c941736b8d3a6 < 1439673b78185eaaa5fae444b3a9d58c434ee78e
Linux Linux 88dde5e23da1a16fe9a417171e6c941736b8d3a6 < eb963d7948ce6571939c6875424b557b25f16610
Linux Linux 5.12
linux linux_kernel < 6.14.9

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.24%
Raw Score 0.002370
Percentile 14.8%
Date 2026-11-01

EPSS Trend

2026-11-01
0.00237
2026-10-31
0.00237
2026-10-30
0.00237
2026-10-29
0.00237

Intelligence Sources

mitre ref →
nvd ref →