{"api_version":"1","generated_at":"2026-10-21T18:43:03+00:00","cve":"CVE-2025-38041","urls":{"html":"https://cve.report/CVE-2025-38041","api":"https://cve.report/api/cve/CVE-2025-38041.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2025-38041","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2025-38041"},"summary":{"title":"clk: sunxi-ng: h616: Reparent GPU clock during frequency changes","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nclk: sunxi-ng: h616: Reparent GPU clock during frequency changes\n\nThe H616 manual does not state that the GPU PLL supports\ndynamic frequency configuration, so we must take extra care when changing\nthe frequency. Currently any attempt to do device DVFS on the GPU lead\nto panfrost various ooops, and GPU hangs.\n\nThe manual describes the algorithm for changing the PLL\nfrequency, which the CPU PLL notifier code already support, so we reuse\nthat to reparent the GPU clock to GPU1 clock during frequency\nchanges.","state":"PUBLISHED","assigner":"Linux","published_at":"2025-06-18 10:15:36","updated_at":"2026-10-21 13:18:07"},"problem_types":["NVD-CWE-noinfo"],"metrics":[{"version":"3.1","source":"nvd@nist.gov","type":"Primary","score":"5.5","severity":"MEDIUM","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"}}],"references":[{"url":"https://git.kernel.org/stable/c/0c4f89f02c72f7cfb98a9a09cae89cc2e39e6017","name":"https://git.kernel.org/stable/c/0c4f89f02c72f7cfb98a9a09cae89cc2e39e6017","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/47a0da0c80749767de1bc0a7a27a69b34c22fbda","name":"https://git.kernel.org/stable/c/47a0da0c80749767de1bc0a7a27a69b34c22fbda","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/1439673b78185eaaa5fae444b3a9d58c434ee78e","name":"https://git.kernel.org/stable/c/1439673b78185eaaa5fae444b3a9d58c434ee78e","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":["Patch"],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/eb963d7948ce6571939c6875424b557b25f16610","name":"https://git.kernel.org/stable/c/eb963d7948ce6571939c6875424b557b25f16610","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":["Patch"],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-38041","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-38041","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 88dde5e23da1a16fe9a417171e6c941736b8d3a6 47a0da0c80749767de1bc0a7a27a69b34c22fbda git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 88dde5e23da1a16fe9a417171e6c941736b8d3a6 0c4f89f02c72f7cfb98a9a09cae89cc2e39e6017 git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 88dde5e23da1a16fe9a417171e6c941736b8d3a6 1439673b78185eaaa5fae444b3a9d58c434ee78e git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 88dde5e23da1a16fe9a417171e6c941736b8d3a6 eb963d7948ce6571939c6875424b557b25f16610 git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 5.12","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 5.12 semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 6.6.160 6.6.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 6.12.114 6.12.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 6.14.9 6.14.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 6.15 * original_commit_for_fix","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2025","cve_id":"38041","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"linux","cpe5":"linux_kernel","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"cna":{"affected":[{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/clk/sunxi-ng/ccu-sun50i-h616.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"47a0da0c80749767de1bc0a7a27a69b34c22fbda","status":"affected","version":"88dde5e23da1a16fe9a417171e6c941736b8d3a6","versionType":"git"},{"lessThan":"0c4f89f02c72f7cfb98a9a09cae89cc2e39e6017","status":"affected","version":"88dde5e23da1a16fe9a417171e6c941736b8d3a6","versionType":"git"},{"lessThan":"1439673b78185eaaa5fae444b3a9d58c434ee78e","status":"affected","version":"88dde5e23da1a16fe9a417171e6c941736b8d3a6","versionType":"git"},{"lessThan":"eb963d7948ce6571939c6875424b557b25f16610","status":"affected","version":"88dde5e23da1a16fe9a417171e6c941736b8d3a6","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/clk/sunxi-ng/ccu-sun50i-h616.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.12"},{"lessThan":"5.12","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.160","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.114","versionType":"semver"},{"lessThanOrEqual":"6.14.*","status":"unaffected","version":"6.14.9","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"6.15","versionType":"original_commit_for_fix"}]}],"cpeApplicability":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.6.160","versionStartIncluding":"5.12","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.12.114","versionStartIncluding":"5.12","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.14.9","versionStartIncluding":"5.12","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.15","versionStartIncluding":"5.12","vulnerable":true}],"negate":false,"operator":"OR"}]}],"descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nclk: sunxi-ng: h616: Reparent GPU clock during frequency changes\n\nThe H616 manual does not state that the GPU PLL supports\ndynamic frequency configuration, so we must take extra care when changing\nthe frequency. Currently any attempt to do device DVFS on the GPU lead\nto panfrost various ooops, and GPU hangs.\n\nThe manual describes the algorithm for changing the PLL\nfrequency, which the CPU PLL notifier code already support, so we reuse\nthat to reparent the GPU clock to GPU1 clock during frequency\nchanges."}],"providerMetadata":{"dateUpdated":"2026-10-21T12:36:39.091Z","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","shortName":"Linux"},"references":[{"url":"https://git.kernel.org/stable/c/47a0da0c80749767de1bc0a7a27a69b34c22fbda"},{"url":"https://git.kernel.org/stable/c/0c4f89f02c72f7cfb98a9a09cae89cc2e39e6017"},{"url":"https://git.kernel.org/stable/c/1439673b78185eaaa5fae444b3a9d58c434ee78e"},{"url":"https://git.kernel.org/stable/c/eb963d7948ce6571939c6875424b557b25f16610"}],"title":"clk: sunxi-ng: h616: Reparent GPU clock during frequency changes","x_generator":{"engine":"bippy-1.2.0"}}},"cveMetadata":{"assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","assignerShortName":"Linux","cveId":"CVE-2025-38041","datePublished":"2025-06-18T09:33:26.543Z","dateReserved":"2025-04-16T04:51:23.978Z","dateUpdated":"2026-10-21T12:36:39.091Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2025-06-18 10:15:36","lastModifiedDate":"2026-10-21 13:18:07","problem_types":["NVD-CWE-noinfo"],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.14.9","matchCriteriaId":"77E9095E-F219-488D-B19D-B194A129A9D6"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2025","CveId":"38041","Ordinal":"1","Title":"clk: sunxi-ng: h616: Reparent GPU clock during frequency changes","CVE":"CVE-2025-38041","Year":"2025"},"notes":[{"CveYear":"2025","CveId":"38041","Ordinal":"1","NoteData":"In the Linux kernel, the following vulnerability has been resolved:\n\nclk: sunxi-ng: h616: Reparent GPU clock during frequency changes\n\nThe H616 manual does not state that the GPU PLL supports\ndynamic frequency configuration, so we must take extra care when changing\nthe frequency. Currently any attempt to do device DVFS on the GPU lead\nto panfrost various ooops, and GPU hangs.\n\nThe manual describes the algorithm for changing the PLL\nfrequency, which the CPU PLL notifier code already support, so we reuse\nthat to reparent the GPU clock to GPU1 clock during frequency\nchanges.","Type":"Description","Title":"clk: sunxi-ng: h616: Reparent GPU clock during frequency changes"}]}}}