CVE-2025-38041
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
18/06/2025
Last modified:
14/11/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
clk: sunxi-ng: h616: Reparent GPU clock during frequency changes<br />
<br />
The H616 manual does not state that the GPU PLL supports<br />
dynamic frequency configuration, so we must take extra care when changing<br />
the frequency. Currently any attempt to do device DVFS on the GPU lead<br />
to panfrost various ooops, and GPU hangs.<br />
<br />
The manual describes the algorithm for changing the PLL<br />
frequency, which the CPU PLL notifier code already support, so we reuse<br />
that to reparent the GPU clock to GPU1 clock during frequency<br />
changes.
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.14.9 (excluding) |
To consult the complete list of CPE names with products and versions, see this page