CVE-2025-38041clk: sunxi-ng: h616: Reparent GPU clock during frequency changes
Updated under an hour ago ()
Does this affect you?
It affects Linux and 1 other product. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: clk: sunxi-ng: h616: Reparent GPU clock during frequency changes The H616 manual does not state that the GPU PLL supports dynamic frequency configuration, so we must take extra care when changing the frequency. Currently any attempt to do device DVFS on the GPU lead to panfrost various ooops, and GPU hangs. The manual describes the algorithm for changing the PLL frequency, which the CPU PLL notifier code already support, so we reuse that to reparent the GPU clock to GPU1 clock during frequency changes.
- CVSS
- 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Modified
- Record last updated
- Oct 21, 2026
- First seen by InfoSec Signals
- Oct 21, 2026
Affected products
Linux Linux linux:linux (from the name) | 88dde5e23da1a16fe9a417171e6c941736b8d3a6 builds before 47a0da0c80749767de1bc0a7a27a69b34c22fbda; 88dde5e23da1a16fe9a417171e6c941736b8d3a6 builds before 0c4f89f02c72f7cfb98a9a09cae89cc2e39e6017; from 88dde5e23da1a16fe9a417171e6c941736b8d3a6 before 1439673b78185eaaa5fae444b3a9d58c434ee78e; from 88dde5e23da1a16fe9a417171e6c941736b8d3a6 before eb963d7948ce6571939c6875424b557b25f16610 | CNA record |
linux linux_kernel linux:linux_kernel | before 6.14.9 | NVD |
References
- https://git.kernel.org/stable/c/47a0da0c80749767de1bc0a7a27a69b34c22fbda
- https://git.kernel.org/stable/c/0c4f89f02c72f7cfb98a9a09cae89cc2e39e6017
- https://git.kernel.org/stable/c/1439673b78185eaaa5fae444b3a9d58c434ee78epatch
- https://git.kernel.org/stable/c/eb963d7948ce6571939c6875424b557b25f16610patch
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.