csirt@kutim:~/threat-intel/cve/CVE-2025-38521

Katalog CVE

CVSS 7.1 · High EPSS 0,15%

Kerentanan Exposure of Resource to Wrong Sphere pada linux kernel. Skor CVSS 3.1 7.1 (High) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fix kernel crash when hard resetting the GPU The GPU hard reset sequence calls pm_runtime_force_suspend() and pm_runtime_force_resume(), which according to their documentation should only be used during system-wide PM transitions to sleep states. The main issue though is that depending on some internal runtime PM state as seen by pm_runtime_force_suspend() (whether the usage count is <= 1), pm_runtime_force_resume() might not resume the device unless needed. If that happens, the runtime PM resume callback pvr_power_device_resume() is not called, the GPU clocks are not re-enabled, and the kernel crashes on the next attempt to access GPU registers as part of the power-on sequence. Replace calls to pm_runtime_force_suspend() and pm_runtime_force_resume() with direct calls to the driver's runtime PM callbacks, pvr_power_device_suspend() and pvr_power_device_resume(), to ensure clocks are re-enabled and avoid the kernel crash.

Rincian

Terbit di NVD
16 Agustus 2025
Terakhir diubah
17 Juni 2026
Status NVD
Analyzed
CVSS 3.1
7.1 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-668: Exposure of Resource to Wrong Sphere
EPSS (30 hari)
0,15% peluang dieksploitasi; lebih tinggi dari 3,7% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
linux linux kernel Versi 6.8 hingga sebelum 6.12.39
linux linux kernel Versi 6.13 hingga sebelum 6.15.7
linux linux kernel Versi 6.16 rc1
linux linux kernel Versi 6.16 rc2
linux linux kernel Versi 6.16 rc3
linux linux kernel Versi 6.16 rc4
linux linux kernel Versi 6.16 rc5

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.