CVE-2025-37829

cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate()

State: Published
Severity: Not scored
Published: May 8, 2025
Updated: May 11, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate()

cpufreq_cpu_get_raw() can return NULL when the target CPU is not present in the policy->cpus mask. scpi_cpufreq_get_rate() does not check for this case, which results in a NULL pointer dereference.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	343a8d17fa8d6dd97f408e8fedbcef12073f3774 to before ad4796f2da495b2cbbd0fccccbcbf63f2aeee613Affected 343a8d17fa8d6dd97f408e8fedbcef12073f3774 to before fdf035d9c5436536ffcfea0ac6adeb5dda3c3a23Affected 343a8d17fa8d6dd97f408e8fedbcef12073f3774 to before 8fbaa76690f67a7cbad315f89d607b46e3e06edeAffected 343a8d17fa8d6dd97f408e8fedbcef12073f3774 to before da8ee91e532486055ecf88478d38c2f3dc234182Affected 343a8d17fa8d6dd97f408e8fedbcef12073f3774 to before 19e0eaa62e8831f2bc0285fef3bf8faaa7f3e09bAffected 343a8d17fa8d6dd97f408e8fedbcef12073f3774 to before 28fbd7b13b4d3074b16db913aedc9d8d37ab41e7Affected 343a8d17fa8d6dd97f408e8fedbcef12073f3774 to before 124bddf123311cd1f18bffd63a5d974468d59c67Affected 343a8d17fa8d6dd97f408e8fedbcef12073f3774 to before 73b24dc731731edf762f9454552cb3a5b7224949Affected
LinuxLinux	4.16Affected before 4.16Not affected 5.4.293 through 5.4.Not affected 5.10.237 through 5.10.Not affected 5.15.181 through 5.15.Not affected 6.1.136 through 6.1.Not affected 6.6.89 through 6.6.Not affected 6.12.26 through 6.12.Not affected 6.14.5 through 6.14.*Not affected 6.15 and laterNot affected

Product

Versions

LinuxLinux

343a8d17fa8d6dd97f408e8fedbcef12073f3774 to before ad4796f2da495b2cbbd0fccccbcbf63f2aeee613Affected
343a8d17fa8d6dd97f408e8fedbcef12073f3774 to before fdf035d9c5436536ffcfea0ac6adeb5dda3c3a23Affected
343a8d17fa8d6dd97f408e8fedbcef12073f3774 to before 8fbaa76690f67a7cbad315f89d607b46e3e06edeAffected
343a8d17fa8d6dd97f408e8fedbcef12073f3774 to before da8ee91e532486055ecf88478d38c2f3dc234182Affected
343a8d17fa8d6dd97f408e8fedbcef12073f3774 to before 19e0eaa62e8831f2bc0285fef3bf8faaa7f3e09bAffected
343a8d17fa8d6dd97f408e8fedbcef12073f3774 to before 28fbd7b13b4d3074b16db913aedc9d8d37ab41e7Affected
343a8d17fa8d6dd97f408e8fedbcef12073f3774 to before 124bddf123311cd1f18bffd63a5d974468d59c67Affected
343a8d17fa8d6dd97f408e8fedbcef12073f3774 to before 73b24dc731731edf762f9454552cb3a5b7224949Affected

LinuxLinux

4.16Affected
before 4.16Not affected
5.4.293 through 5.4.*Not affected
5.10.237 through 5.10.*Not affected
5.15.181 through 5.15.*Not affected
6.1.136 through 6.1.*Not affected
6.6.89 through 6.6.*Not affected
6.12.26 through 6.12.*Not affected
6.14.5 through 6.14.*Not affected
6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.