PT-2025-30826 · Amd-Pmf+6 · Amd-Pmf+6

Published 2025-05-21 · Updated 2026-04-20 · CVE-2025-38421

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel’s platform/x86/amd pmf module. A failure during smart PC setup can lead to a double free when unloading amd-pmf, specifically because a device buffer (dev->buf) is freed without being set to NULL and then freed again in amd pmf remove(). This issue is addressed by changing all allocations to device managed allocations.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Double Free

Weakness Enumeration

CWE-415

Related Identifiers

BDU:2025-09136

CVE-2025-38421

OPENSUSE-SU-2025:20081-1

SUSE-SU-2025:21074-1

SUSE-SU-2025:21139-1

SUSE-SU-2025:21179-1

USN-7833-1

USN-7833-2

USN-7833-3

USN-7833-4

USN-7834-1

USN-7856-1

Affected Products

Astra Linux

Debian

Linuxmint

Linux Kernel

Suse

Ubuntu

Amd-Pmf

References · 1459

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38421.json · Exploit
• https://ubuntu.com/security/CVE-2025-38090 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38355 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38257 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-36350 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38227 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38411 · Vendor Advisory
• https://git.kernel.org/stable/c/0d10b532f861253c283863522d59d099fcb0796d · Patch
• https://ubuntu.com/security/CVE-2025-38214 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38431 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38338 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38242 · Vendor Advisory
• https://git.kernel.org/stable/c/d9db3a941270d92bbd1a6a6b54a10324484f2f2d · Patch
• https://ubuntu.com/security/CVE-2025-38236 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38342 · Vendor Advisory