In the Linux kernel, the following vulnerability has been resolved:
platform/x86/amd: pmf: Use device managed allocations
If setting up smart PC fails for any reason then this can lead to a double free when unloading amd-pmf. This is because dev->buf was freed but never set to NULL and is again freed in amdpmfremove().
To avoid subtle allocation bugs in failures leading to a double free change all allocations into device managed allocations.
[
{
"target": {
"function": "amd_pmf_init_smart_pc",
"file": "drivers/platform/x86/amd/pmf/tee-if.c"
},
"signature_version": "v1",
"digest": {
"length": 2040.0,
"function_hash": "130469619086771427445398892564708996802"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0d10b532f861253c283863522d59d099fcb0796d",
"deprecated": false,
"id": "CVE-2025-38421-210afaa5",
"signature_type": "Function"
},
{
"target": {
"file": "drivers/platform/x86/amd/pmf/core.c"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"70293710606170165548179941755212734545",
"265555178858040449265814249636550670753",
"134428314833161215603192965537883758709",
"53779907993737184043108957012739295679",
"45610467799402804040672385187252524803",
"263258231395898802829284104401394497177",
"19685287428625167716466260428710294183",
"322852269595737441345173167158653180124"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d9db3a941270d92bbd1a6a6b54a10324484f2f2d",
"deprecated": false,
"id": "CVE-2025-38421-66ed5fef",
"signature_type": "Line"
},
{
"target": {
"file": "drivers/platform/x86/amd/pmf/tee-if.c"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"307273273860767362002412227752650738684",
"66550944692181036728155917235923384605",
"270148626908617934647667886356436766910",
"311659346213385180904574212951634901286",
"155646975032326923305896717152314403025",
"299346368896734815408763610565947828681",
"183658047588761380353667010986758786153",
"284041002363551008602665371696658277972",
"271909526038599487692617788651677461839",
"294861437606207350145457704302342811796",
"137490766451252160430649788935322440667",
"230078212890814911845044445754550070083",
"195574362355148023561556292766625331829",
"188379257123371841715756406615354678464",
"73281387002196719361734062394558495891",
"124603226920263812569224455013013464203",
"110704396057757176485396996576392650984",
"128471302911919126686966249369760719372",
"58999649909897175660195850808474129180",
"193308871479346711583617214433340420305",
"50195180813210873401792946263147549900",
"234940586003488715640651497045404005021",
"64423195171520411275743100315142221286",
"254052221253195539502872773918127814322",
"250602511292287841099875837679599682111",
"119525882606175342296863961640561061352",
"326753517982374700970877938724718120082",
"191730066889130025954884482073530589708",
"196753619471932088084211026131550073272",
"127318385447844107845653614917052696184",
"49536785847492868900733332206529119540",
"1130451565493709471031113163411215076",
"14968266028432308699839102416044167970",
"148216157711976102931581568190412180669",
"38941593743045733335494390540819624007",
"287504837809166617324797825477811671069",
"333440212272035172082043085065314466189",
"200518244030872063635806047779517277637",
"323495443051029099527945302297768180007",
"72262621123687082692907474925984521884",
"159806381724486275059665328911071608691",
"244825185112374264088952458369764809720",
"13616367892547328391815055652415331505",
"6956218963693995877839523885035186997",
"27045279125274917924926380790918249338",
"130696897654776166601706827239724182255",
"207689527573959317090169195047509742845",
"305912828827854402705759467042202466424",
"323495404864724676212101846358466464150",
"53551293191816170381053276070003203866",
"115375503266888133074319981317726352850",
"68406354073451320047557656498749942686",
"52618052622408503080037583381117792251",
"66502605145781427234894050905234473825",
"103906979151026706962886501355245737740",
"154145776579035016272298930573653638776",
"129390821232340644187772357175551469991",
"67938221360232458068216539443667008093",
"5286502094473251716045801045233005147",
"340141631378100390979792760440324926494",
"162580795915384036890958359291861309877",
"325761971877870947892843754272697562450",
"79518062093570196135427153534908730023",
"85723231794647651651113529488930621419",
"134005710848023237027441383297700722729",
"104183652204297259358987006650527676968",
"5497073115235114606187128418406901208",
"165816857173156299909553636479444885463",
"274467839831350506047221370822813764366",
"221801858700957905732231094039277972160",
"325366144395362325646055658722627759938"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0d10b532f861253c283863522d59d099fcb0796d",
"deprecated": false,
"id": "CVE-2025-38421-68a711f0",
"signature_type": "Line"
},
{
"target": {
"function": "amd_pmf_remove",
"file": "drivers/platform/x86/amd/pmf/core.c"
},
"signature_version": "v1",
"digest": {
"length": 346.0,
"function_hash": "19532873809591854055842116966973781841"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0d10b532f861253c283863522d59d099fcb0796d",
"deprecated": false,
"id": "CVE-2025-38421-719cdbed",
"signature_type": "Function"
},
{
"target": {
"function": "amd_pmf_deinit_smart_pc",
"file": "drivers/platform/x86/amd/pmf/tee-if.c"
},
"signature_version": "v1",
"digest": {
"length": 384.0,
"function_hash": "144523223765968170240470402790074180798"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d9db3a941270d92bbd1a6a6b54a10324484f2f2d",
"deprecated": false,
"id": "CVE-2025-38421-828d652a",
"signature_type": "Function"
},
{
"target": {
"function": "amd_pmf_get_pb_data",
"file": "drivers/platform/x86/amd/pmf/tee-if.c"
},
"signature_version": "v1",
"digest": {
"length": 638.0,
"function_hash": "312915949994084636541301704646305141094"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0d10b532f861253c283863522d59d099fcb0796d",
"deprecated": false,
"id": "CVE-2025-38421-95af6ff2",
"signature_type": "Function"
},
{
"target": {
"function": "amd_pmf_deinit_smart_pc",
"file": "drivers/platform/x86/amd/pmf/tee-if.c"
},
"signature_version": "v1",
"digest": {
"length": 384.0,
"function_hash": "144523223765968170240470402790074180798"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0d10b532f861253c283863522d59d099fcb0796d",
"deprecated": false,
"id": "CVE-2025-38421-979c08ab",
"signature_type": "Function"
},
{
"target": {
"function": "amd_pmf_init_smart_pc",
"file": "drivers/platform/x86/amd/pmf/tee-if.c"
},
"signature_version": "v1",
"digest": {
"length": 2040.0,
"function_hash": "130469619086771427445398892564708996802"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d9db3a941270d92bbd1a6a6b54a10324484f2f2d",
"deprecated": false,
"id": "CVE-2025-38421-99a3b4e8",
"signature_type": "Function"
},
{
"target": {
"function": "amd_pmf_set_dram_addr",
"file": "drivers/platform/x86/amd/pmf/core.c"
},
"signature_version": "v1",
"digest": {
"length": 775.0,
"function_hash": "13919746475424580958783451458213263991"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d9db3a941270d92bbd1a6a6b54a10324484f2f2d",
"deprecated": false,
"id": "CVE-2025-38421-9c6f81e9",
"signature_type": "Function"
},
{
"target": {
"function": "amd_pmf_set_dram_addr",
"file": "drivers/platform/x86/amd/pmf/core.c"
},
"signature_version": "v1",
"digest": {
"length": 775.0,
"function_hash": "13919746475424580958783451458213263991"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0d10b532f861253c283863522d59d099fcb0796d",
"deprecated": false,
"id": "CVE-2025-38421-a50f9948",
"signature_type": "Function"
},
{
"target": {
"file": "drivers/platform/x86/amd/pmf/tee-if.c"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"307273273860767362002412227752650738684",
"66550944692181036728155917235923384605",
"270148626908617934647667886356436766910",
"311659346213385180904574212951634901286",
"155646975032326923305896717152314403025",
"299346368896734815408763610565947828681",
"183658047588761380353667010986758786153",
"284041002363551008602665371696658277972",
"271909526038599487692617788651677461839",
"294861437606207350145457704302342811796",
"137490766451252160430649788935322440667",
"230078212890814911845044445754550070083",
"195574362355148023561556292766625331829",
"188379257123371841715756406615354678464",
"73281387002196719361734062394558495891",
"124603226920263812569224455013013464203",
"110704396057757176485396996576392650984",
"128471302911919126686966249369760719372",
"58999649909897175660195850808474129180",
"193308871479346711583617214433340420305",
"50195180813210873401792946263147549900",
"234940586003488715640651497045404005021",
"64423195171520411275743100315142221286",
"254052221253195539502872773918127814322",
"250602511292287841099875837679599682111",
"119525882606175342296863961640561061352",
"326753517982374700970877938724718120082",
"191730066889130025954884482073530589708",
"196753619471932088084211026131550073272",
"127318385447844107845653614917052696184",
"49536785847492868900733332206529119540",
"1130451565493709471031113163411215076",
"14968266028432308699839102416044167970",
"148216157711976102931581568190412180669",
"38941593743045733335494390540819624007",
"287504837809166617324797825477811671069",
"333440212272035172082043085065314466189",
"200518244030872063635806047779517277637",
"323495443051029099527945302297768180007",
"72262621123687082692907474925984521884",
"159806381724486275059665328911071608691",
"244825185112374264088952458369764809720",
"13616367892547328391815055652415331505",
"6956218963693995877839523885035186997",
"27045279125274917924926380790918249338",
"130696897654776166601706827239724182255",
"207689527573959317090169195047509742845",
"305912828827854402705759467042202466424",
"323495404864724676212101846358466464150",
"53551293191816170381053276070003203866",
"115375503266888133074319981317726352850",
"68406354073451320047557656498749942686",
"52618052622408503080037583381117792251",
"66502605145781427234894050905234473825",
"103906979151026706962886501355245737740",
"154145776579035016272298930573653638776",
"129390821232340644187772357175551469991",
"67938221360232458068216539443667008093",
"5286502094473251716045801045233005147",
"340141631378100390979792760440324926494",
"162580795915384036890958359291861309877",
"325761971877870947892843754272697562450",
"79518062093570196135427153534908730023",
"85723231794647651651113529488930621419",
"134005710848023237027441383297700722729",
"104183652204297259358987006650527676968",
"5497073115235114606187128418406901208",
"165816857173156299909553636479444885463",
"274467839831350506047221370822813764366",
"221801858700957905732231094039277972160",
"325366144395362325646055658722627759938"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d9db3a941270d92bbd1a6a6b54a10324484f2f2d",
"deprecated": false,
"id": "CVE-2025-38421-a6dd9058",
"signature_type": "Line"
},
{
"target": {
"file": "drivers/platform/x86/amd/pmf/core.c"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"70293710606170165548179941755212734545",
"265555178858040449265814249636550670753",
"134428314833161215603192965537883758709",
"53779907993737184043108957012739295679",
"45610467799402804040672385187252524803",
"263258231395898802829284104401394497177",
"19685287428625167716466260428710294183",
"322852269595737441345173167158653180124"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0d10b532f861253c283863522d59d099fcb0796d",
"deprecated": false,
"id": "CVE-2025-38421-a9fd16dd",
"signature_type": "Line"
},
{
"target": {
"function": "amd_pmf_get_pb_data",
"file": "drivers/platform/x86/amd/pmf/tee-if.c"
},
"signature_version": "v1",
"digest": {
"length": 638.0,
"function_hash": "312915949994084636541301704646305141094"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d9db3a941270d92bbd1a6a6b54a10324484f2f2d",
"deprecated": false,
"id": "CVE-2025-38421-bb2fd1fa",
"signature_type": "Function"
},
{
"target": {
"function": "amd_pmf_remove",
"file": "drivers/platform/x86/amd/pmf/core.c"
},
"signature_version": "v1",
"digest": {
"length": 346.0,
"function_hash": "19532873809591854055842116966973781841"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d9db3a941270d92bbd1a6a6b54a10324484f2f2d",
"deprecated": false,
"id": "CVE-2025-38421-db6f6779",
"signature_type": "Function"
}
]