CVE-2025-38705

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2025-09-04 Modified: 2026-10-30 First seen: 2026-10-30 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fix null pointer access Writing a string without delimiters (' ', '\n', '\0') to the under gpu_od/fan_ctrl sysfs or pp_power_profile_mode for the CUSTOM profile will result in a null pointer dereference.

Weakness Classification (1)

Affected Software (8)

VendorProductVersion
Linux Linux 37c5c4dbf03b167b5ca68d4bbc7fb6c92a463fb4 < 61c643a4229c182fbfef0f93df2b2e6b79d37575
Linux Linux 37c5c4dbf03b167b5ca68d4bbc7fb6c92a463fb4 < 29a15e06a3d41f60a73a8a0ad7847b11c55f61bf
Linux Linux 37c5c4dbf03b167b5ca68d4bbc7fb6c92a463fb4 < a83ffafd02a7af59848755c109d544e3894af737
Linux Linux 37c5c4dbf03b167b5ca68d4bbc7fb6c92a463fb4 < 5d8cc029e5595760c7d18c64632e8e40a86a9b2e
Linux Linux 37c5c4dbf03b167b5ca68d4bbc7fb6c92a463fb4 < cef79c18538e9ce2ca6e5b3fa95c38ec41dcd07a
Linux Linux 37c5c4dbf03b167b5ca68d4bbc7fb6c92a463fb4 < d524d40e3a6152a3ea1125af729f8cd8ca65efde
Linux Linux 4.17
linux linux_kernel < 6.12.43

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.20%
Raw Score 0.001960
Percentile 9.3%
Date 2026-11-01

EPSS Trend

2026-11-01
0.00196
2026-10-31
0.00196
2026-10-30
0.00195
2026-10-29
0.00195

Intelligence Sources

mitre ref →
nvd ref →