What’s Vulnerable › Vulnerabilities

CVE-2025-38041: clk: sunxi-ng: h616: Reparent GPU clock during frequency changes

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-06-18 · updated 2026-10-30

Description

In the Linux kernel, the following vulnerability has been resolved: clk: sunxi-ng: h616: Reparent GPU clock during frequency changes The H616 manual does not state that the GPU PLL supports dynamic frequency configuration, so we must take extra care when changing the frequency. Currently any attempt to do device DVFS on the GPU lead to panfrost various ooops, and GPU hangs. The manual describes the algorithm for changing the PLL frequency, which the CPU PLL notifier code already support, so we reuse that to reparent the GPU clock to GPU1 clock during frequency changes.

Affected products

• Linux kernel: before 6.14.9 — fixed in 6.14.9
• Linux: 5.12 — fixed in 6.15

How to fix

Upgrade to a fixed version: Linux kernel 6.14.9; Linux 6.15. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0c4f89f02c72f7cfb98a9a09cae89cc2e39e6017
• https://git.kernel.org/stable/c/1439673b78185eaaa5fae444b3a9d58c434ee78e
• https://git.kernel.org/stable/c/47a0da0c80749767de1bc0a7a27a69b34c22fbda
• https://git.kernel.org/stable/c/5b447255bf170aee508d50c4a3a1156eb6dcc9b4
• https://git.kernel.org/stable/c/eb963d7948ce6571939c6875424b557b25f16610

Get alerted when CVE-2025-38041 or the next vulnerability affects your stack