CVE-2025-38038

MEDIUM5.5

cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost

Published Jun 18, 2025

Modified 9 months ago

Details

In the Linux kernel, the following vulnerability has been resolved:

cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost

set_boost is a per-policy function call, hence a driver wide lock is unnecessary. Also this mutex_acquire can collide with the mutex_acquire from the mode-switch path in status_store(), which can lead to a deadlock. So, remove it.

References

WEB

https://git.kernel.org/stable/c/61e931ee145eeab8196e585ff4334870b130b744

WEB

https://git.kernel.org/stable/c/cd347d071713234586762d79c5a691785e9be418

WEB

https://git.kernel.org/stable/c/db1cafc77aaaf871509da06f4a864e9af6d6791f

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2025-38038

CVSS Analysis

CVSS v3.1

5.5

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

NoneC:N

Integrity

NoneI:N

Availability

HighA:H

5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Ecosystems

Timeline

PublishedJun 18, 2025

ModifiedJun 19, 2025

CVE-2025-38038 | Mondoo Vulnerability Intelligence