CVE-2025-37830

cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate()

State: Published
Severity: Not scored
Published: May 8, 2025
Updated: May 11, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate()

cpufreq_cpu_get_raw() can return NULL when the target CPU is not present in the policy->cpus mask. scmi_cpufreq_get_rate() does not check for this case, which results in a NULL pointer dereference.

Add NULL check after cpufreq_cpu_get_raw() to prevent this issue.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	99d6bdf3387734d75e3e34e94a58b8a355b7a9c8 to before bd1dcfba72aac4159c1d5e17cd861e702e6c19acAffected 99d6bdf3387734d75e3e34e94a58b8a355b7a9c8 to before 4e3d1c1925d8e752992cd893d03d974e6807ac16Affected 99d6bdf3387734d75e3e34e94a58b8a355b7a9c8 to before f9c5423855e3687262d881aeee5cfb3bc8577bffAffected 99d6bdf3387734d75e3e34e94a58b8a355b7a9c8 to before ea834c90aa7cc80a1b456f7a91432734d5087d16Affected 99d6bdf3387734d75e3e34e94a58b8a355b7a9c8 to before 7ccfadfb2562337b4f0462a86a9746a6eea89718Affected 99d6bdf3387734d75e3e34e94a58b8a355b7a9c8 to before cfaca93b8fe317b7faa9af732e0ba8c9081fa018Affected 99d6bdf3387734d75e3e34e94a58b8a355b7a9c8 to before 484d3f15cc6cbaa52541d6259778e715b2c83c54Affected
LinuxLinux	4.17Affected before 4.17Not affected 5.10.248 through 5.10.Not affected 5.15.181 through 5.15.Not affected 6.1.136 through 6.1.Not affected 6.6.89 through 6.6.Not affected 6.12.26 through 6.12.Not affected 6.14.5 through 6.14.Not affected 6.15 and laterNot affected

Product

Versions

LinuxLinux

99d6bdf3387734d75e3e34e94a58b8a355b7a9c8 to before bd1dcfba72aac4159c1d5e17cd861e702e6c19acAffected
99d6bdf3387734d75e3e34e94a58b8a355b7a9c8 to before 4e3d1c1925d8e752992cd893d03d974e6807ac16Affected
99d6bdf3387734d75e3e34e94a58b8a355b7a9c8 to before f9c5423855e3687262d881aeee5cfb3bc8577bffAffected
99d6bdf3387734d75e3e34e94a58b8a355b7a9c8 to before ea834c90aa7cc80a1b456f7a91432734d5087d16Affected
99d6bdf3387734d75e3e34e94a58b8a355b7a9c8 to before 7ccfadfb2562337b4f0462a86a9746a6eea89718Affected
99d6bdf3387734d75e3e34e94a58b8a355b7a9c8 to before cfaca93b8fe317b7faa9af732e0ba8c9081fa018Affected
99d6bdf3387734d75e3e34e94a58b8a355b7a9c8 to before 484d3f15cc6cbaa52541d6259778e715b2c83c54Affected

LinuxLinux

4.17Affected
before 4.17Not affected
5.10.248 through 5.10.*Not affected
5.15.181 through 5.15.*Not affected
6.1.136 through 6.1.*Not affected
6.6.89 through 6.6.*Not affected
6.12.26 through 6.12.*Not affected
6.14.5 through 6.14.*Not affected
6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.