PT-2025-33564 · Linux+6 · Linux Kernel+6

CVE-2025-38521

·

Publicado

2025-07-04

·

Atualizado

2026-04-20

CVSS v3.1

7.1

Alta

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)
Description: The vulnerability involves a kernel crash when hard resetting the GPU in the Imagination GPU driver. The GPU hard reset sequence incorrectly calls pm runtime force suspend() and pm runtime force resume(), which are intended for system-wide power management transitions. This can lead to the GPU clocks not being re-enabled, resulting in a kernel crash when attempting to access GPU registers. The issue arises because pm runtime force resume() might not resume the device unless needed, preventing the pvr power device resume() callback from being executed.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Exposure of Resource to Wrong Sphere

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2025-15819
CVE-2025-38521
OPENSUSE-SU-2026:20287-1
SUSE-SU-2025:03290-1
SUSE-SU-2025:03382-1
SUSE-SU-2025:03633-1
SUSE-SU-2025_03290-1
SUSE-SU-2025_03382-1
SUSE-SU-2026:20555-1
SUSE-SU-2026:20570-1
SUSE-SU-2026:20599-1
SUSE-SU-2026:20615-1
USN-7879-1
USN-7879-2
USN-7879-3
USN-7879-4
USN-7880-1
USN-7934-1
USN-8028-1
USN-8028-2
USN-8028-3
USN-8028-4
USN-8028-5
USN-8028-6
USN-8028-7
USN-8028-8
USN-8031-1
USN-8031-2
USN-8031-3
USN-8052-1
USN-8052-2
USN-8074-1
USN-8074-2
USN-8126-1

Produtos afetados

Astra Linux
Imagination Gpu Driver
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu