PT-2025-27637 · Linux+2 · Linux Kernel+2

Anubis · Published 2025-02-19 · Updated 2026-02-11 · CVE-2025-38093

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The issue concerns the Linux kernel on arm64 devices, specifically the qcom x1e80100, where the GPU does not automatically throttle its speed when reaching high temperatures, unlike the CPU. This can lead to the hardware shutdown temperature of 120°C being reached with high GPU loads, endangering the hardware and preventing certain applications from running. The solution involves setting up GPU cooling by throttling the GPU speed when it reaches 95°C and polling every 200ms.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Check for Exceptional Conditions

Weakness Enumeration

CWE-754

Related Identifiers

BDU:2025-11385

CVE-2025-38093

Affected Products

Astra Linux

Linux Kernel

Red Os

References · 23

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38093.json · Exploit
• https://osv.dev/vulnerability/BELL-CVE-2025-38093 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-38093 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-38093 · Vendor Advisory
• https://git.kernel.org/stable/c/5ba21fa11f473c9827f378ace8c9f983de9e0287 · Patch
• https://git.kernel.org/stable/c/d145a6a3e252f093dc243d2944fecb2387a3d690 · Patch
• https://git.kernel.org/stable/c/ae664ca09072857349857530dce12e09c048b12d · Patch
• https://git.kernel.org/stable/c/cd9d354bdd28b20a8f3170dab3bc0f096e66d6b4 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-38093 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-38093 · Security Note
• https://osv.dev/vulnerability/CVE-2025-38093 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38093 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-38093 · Security Note
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2025-0811SE18 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-11385 · Security Note