Null Pointer Dereference in Linux Kernel Affecting AMD Graphics Drivers

CVE-2025-38705

What is CVE-2025-38705?

A vulnerability in the Linux kernel related to AMD graphics drivers has been identified, which allows for a null pointer dereference. This issue can occur when writing a string without suitable delimiters to the gpu_od/fan_ctrl sysfs or pp_power_profile_mode for the CUSTOM profile. An improperly formatted string can lead to unpredictable behavior and system instability. Appropriate measures should be taken to ensure proper input validation to avoid exploitation of this flaw.

References