CVE-2025-37829
MEDIUM severity · CVSS 5.5 · CWE-476
5.5CVSS MEDIUM
Summary
In the Linux kernel, the following vulnerability has been resolved: cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate() cpufreq_cpu_get_raw() can return NULL when the target CPU is not present in the policy->cpus mask. scpi_cpufreq_get_rate() does not check for this case, which results in a NULL pointer dereference.
Impact & exploitability
Attack vectorLocal
Attack complexityLow
Privileges requiredLow
User interactionNone
Confidentiality impactNone
Integrity impactNone
Availability impactHigh
Exploit probability (EPSS)0%
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected products we track (2)
Recommendation
Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.
Official patch: https://git.kernel.org/stable/c/124bddf123311cd1f18bffd63a5d974468d59c67 ↗
Additional information
- NVD record
- https://git.kernel.org/stable/c/124bddf123311cd1f18bffd63a5d974468d59c67Patch
- https://git.kernel.org/stable/c/19e0eaa62e8831f2bc0285fef3bf8faaa7f3e09bPatch
- https://git.kernel.org/stable/c/28fbd7b13b4d3074b16db913aedc9d8d37ab41e7Patch
- https://git.kernel.org/stable/c/73b24dc731731edf762f9454552cb3a5b7224949Patch
- https://git.kernel.org/stable/c/8fbaa76690f67a7cbad315f89d607b46e3e06edePatch
- https://git.kernel.org/stable/c/ad4796f2da495b2cbbd0fccccbcbf63f2aeee613Patch
- https://git.kernel.org/stable/c/da8ee91e532486055ecf88478d38c2f3dc234182Patch
- https://git.kernel.org/stable/c/fdf035d9c5436536ffcfea0ac6adeb5dda3c3a23Patch