---
id: CVE-2025-38421
title: 'platform/x86/amd: pmf: Use device managed allocations'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  platform/x86/amd: pmf: Use device managed allocations

  If setting up smart PC fails for any reason then this can lead to
  a double free when unloading amd-pmf.  This is …
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= e70b4b8f93d7fcf8ee063a1d1f18782c4da3d335 <
    d6a38e1a82d2f9abd0bae84a354654bccb8389f6
  - >-
    Linux >= 5b1122fc4995f308b21d7cfc64ef9880ac834d20 <
    0d10b532f861253c283863522d59d099fcb0796d
  - >-
    Linux >= 5b1122fc4995f308b21d7cfc64ef9880ac834d20 <
    d9db3a941270d92bbd1a6a6b54a10324484f2f2d
  - Linux 3ed60e51ffdbfef14169bd967e21a6ba5e5ff42b
  - Linux >= 6.12.23 < 6.12.114
  - Linux >= 6.13.11 < 6.14
  - Linux 6.14
published: '2025-07-25'
updated: '2026-10-21'
sourceUpdated: '2026-10-21T12:37:04.677Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-38421'
references:
  - url: 'https://git.kernel.org/stable/c/d6a38e1a82d2f9abd0bae84a354654bccb8389f6'
  - url: 'https://git.kernel.org/stable/c/0d10b532f861253c283863522d59d099fcb0796d'
  - url: 'https://git.kernel.org/stable/c/d9db3a941270d92bbd1a6a6b54a10324484f2f2d'
tags:
  - cve.org
epss: 0.00235
epssPercentile: 0.14385
ingestedAt: '2026-10-21T12:48:53.702Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

platform/x86/amd: pmf: Use device managed allocations

If setting up smart PC fails for any reason then this can lead to
a double free when unloading amd-pmf.  This is because dev->buf was
freed but never set to NULL and is again freed in amd_pmf_remove().

To avoid subtle allocation bugs in failures leading to a double free
change all allocations into device managed allocations.

## Affected

- `Linux >= e70b4b8f93d7fcf8ee063a1d1f18782c4da3d335 < d6a38e1a82d2f9abd0bae84a354654bccb8389f6`
- `Linux >= 5b1122fc4995f308b21d7cfc64ef9880ac834d20 < 0d10b532f861253c283863522d59d099fcb0796d`
- `Linux >= 5b1122fc4995f308b21d7cfc64ef9880ac834d20 < d9db3a941270d92bbd1a6a6b54a10324484f2f2d`
- `Linux 3ed60e51ffdbfef14169bd967e21a6ba5e5ff42b`
- `Linux >= 6.12.23 < 6.12.114`
- `Linux >= 6.13.11 < 6.14`
- `Linux 6.14`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.