Skip to content
Fencer Vulns
medium 5.5

CVE-2025-38360 json

drm/amd/display: Add more checks for DSC / HUBP ONO guarantees

published 2025-07-25 15 mo ago modified 2026-06-17 4 mo ago also EUVD-2025-22643

cvss
5.5
version 3.1, NVD
cisa kev
Not listed
not in CISA's catalog
epss
0.2%
EPSS 0.2% chance of exploitation in 30 days, percentile 8%
public exploits
0
none known

Summary

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Add more checks for DSC / HUBP ONO guarantees

[WHY] For non-zero DSC instances it's possible that the HUBP domain required to drive it for sequential ONO ASICs isn't met, potentially causing the logic to the tile to enter an undefined state leading to a system hang.

[HOW] Add more checks to ensure that the HUBP domain matching the DSC instance is appropriately powered.

(cherry picked from commit da63df07112e5a9857a8d2aaa04255c4206754ec)

Patch / fix

  • Linux Linux 6.12.37, 6.15.5, 6.16
  • linux Debian 14, Debian 13 6.12.37-1

debian advisories DEBIAN-CVE-2025-38360

  • linux-aws-6.14 Ubuntu 24.04 LTS 6.14.0-1015.15~24.04.1
  • linux-gcp-6.14 Ubuntu 24.04 LTS 6.14.0-1018.19~24.04.1
  • linux-oem-6.14 Ubuntu 24.04 LTS 6.14.0-1014.14
  • linux-azure-6.14 Ubuntu 24.04 LTS 6.14.0-1014.14~24.04.1
  • linux-riscv-6.14 Ubuntu 24.04 LTS 6.14.0-34.34.1~24.04.1
  • linux-oracle-6.14 Ubuntu 24.04 LTS 6.14.0-1015.15~24.04.1
  • linux-azure-nvidia-6.14 Ubuntu 24.04 LTS 6.14.0-1007.7
  • linux-realtime-6.14 Ubuntu Pro Realtime 24.04 LTS 6.14.0-1014.14~24.04.1

ubuntu advisories UBUNTU-CVE-2025-38360

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • kernel-azure SLE Module for Public Cloud 15 SP7 6.4.0-150700.20.21.1
  • kernel-syms-azure SLE Module for Public Cloud 15 SP7 6.4.0-150700.20.21.1
  • kernel-source-azure SLE Module for Public Cloud 15 SP7 6.4.0-150700.20.21.1
  • kernel-rt Linux Micro 6.2 6.12.0-160000.6.1
  • kernel-64kb SLES 16.0, Linux Micro 6.2, SLES for SAP applications 16.0 6.12.0-160000.6.1
  • kernel-source SLES 16.0, Linux Micro 6.2, SLES for SAP applications 16.0 6.12.0-160000.6.1
  • kernel-default SLES 16.0, SLE High Availability Extension 16.0, Linux Micro 6.2 +1 more 6.12.0-160000.6.1
  • kernel-default-base SLES 16.0, Linux Micro 6.2, SLES for SAP applications 16.0 6.12.0-160000.6.1.160000.2.4

suse advisories SUSE-SU-2025:4517-1SUSE-SU-2025:21074-1SUSE-SU-2025:21139-1SUSE-SU-2026:20560-1SUSE-SU-2025:21179-1SUSE-SU-2025:03634-1

  • kernel-rt openSUSE Leap 16.0 6.12.0-160000.6.1
  • dtb-aarch64 openSUSE Leap 16.0 6.12.0-160000.6.1
  • kernel-64kb openSUSE Leap 16.0 6.12.0-160000.6.1
  • kernel-syms openSUSE Leap 16.0 6.12.0-160000.6.1
  • kernel-obs-qa openSUSE Leap 16.0 6.12.0-160000.6.1
  • kernel-source openSUSE Leap 16.0 6.12.0-160000.6.1
  • kernel-default openSUSE Leap 16.0 6.12.0-160000.6.1
  • kernel-kvmsmall openSUSE Leap 16.0 6.12.0-160000.6.1

opensuse advisories openSUSE-SU-2025:20081-1

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2025-38360 updated

kernel: drm/amd/display: Add more checks for DSC / HUBP ONO guarantees

  • Red Hat Enterprise Linux 6 perf, kernel, python-perf, kernel-kdump, kernel-firmware, kernel-bootwrapper, +1 more Red Hat Enterprise Linux 7 perf, kernel, bpftool, kernel-rt, python-perf, kernel-kdump, +8 more Red Hat Enterprise Linux 8 perf, kernel, bpftool, kernel-rt, kernel-core, kernel-tools, +29 more Red Hat Enterprise Linux 9 rv, perf, rtla, kernel, bpftool, libperf, +83 more Red Hat Enterprise Linux 10 kernel
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Exploit prediction

0.19% chance of exploitation in the next 30 days, higher than 8% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
NVD 3.1 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

  • Linux Linux

Classification

Technology feeds

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.