CVE-2025-38038

MEDIUM

Linux Kernel 5.17-6.12.30, 6.13.0-6.14.8 - Denial of Service via AMD P-State Boost Deadlock

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost set_boost is a per-policy function call, hence a driver wide lock is unnecessary. Also this mutex_acquire can collide with the mutex_acquire from the mode-switch path in status_store(), which can lead to a deadlock. So, remove it.

References (3)

Core 3

Core References

Patch

https://git.kernel.org/stable/c/61e931ee145eeab8196e585ff4334870b130b744

Patch

https://git.kernel.org/stable/c/cd347d071713234586762d79c5a691785e9be418

Patch

https://git.kernel.org/stable/c/db1cafc77aaaf871509da06f4a864e9af6d6791f

Scores

CVSS v3 5.5

EPSS 0.0016

EPSS Percentile 5.3%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

Status published

Products (11)

linux/Kernel 5.17.0 - 6.12.31linux

linux/Kernel 6.13.0 - 6.14.9linux

Linux/Linux < 5.17

Linux/Linux 5.17

Linux/Linux 6.12.31 - 6.12.*

Linux/Linux 6.14.9 - 6.14.*

Linux/Linux 6.15

Linux/Linux ec437d71db77a181227bf6d0ac9d4a80e58ecf0f - 61e931ee145eeab8196e585ff4334870b130b744

Linux/Linux ec437d71db77a181227bf6d0ac9d4a80e58ecf0f - cd347d071713234586762d79c5a691785e9be418

Linux/Linux ec437d71db77a181227bf6d0ac9d4a80e58ecf0f - db1cafc77aaaf871509da06f4a864e9af6d6791f

... and 1 more

Published Jun 18, 2025

Tracked Since Feb 18, 2026