İçeriğe geç
Bilgi ve Teknoloji Uygulamada aç

Yüksek CVSS 7.8

CVE-2025-38421: Linux Kernel: güvenlik açığı

Yayın: · Güncelleme:

Açıklama (NVD)

In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd: pmf: Use device managed allocations If setting up smart PC fails for any reason then this can lead to a double free when unloading amd-pmf. This is because dev->buf was freed but never set to NULL and is again freed in amd_pmf_remove(). To avoid subtle allocation bugs in failures leading to a double free change all allocations into device managed allocations.

Özet bilgiler

Ürün
Linux Linux Kernel
CVSS v3.1
7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
%0,24 (yüzdelik 15)
CWE
CWE-415
Yama
Mevcut

Etkilenen sürümler

ÜrünBaşlangıçBitişDüzeltildi
linux-linux-kernel6.12.23—6.13
linux-linux-kernel6.13.11—6.14
linux-linux-kernel6.14.1—6.15.4
linux-linux-kernel6.146.14—
linux-linux-kernel6.146.14—
linux-linux-kernel6.166.16—
linux-linux-kernel6.166.16—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları