Riskcovery

CVE-2025-37831

cpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate()

State
Published
Severity
Not scored
Published
May 8, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

cpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate()

cpufreq_cpu_get_raw() can return NULL when the target CPU is not present in the policy->cpus mask. apple_soc_cpufreq_get_rate() does not check for this case, which results in a NULL pointer dereference.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 6286bbb40576ffadfde206c332b61345c19af57f to before 1053dcf8a504d4933bb3f73df22bc363298d194bAffected
  • 6286bbb40576ffadfde206c332b61345c19af57f to before fbdba5f37413dbc09d82ad7235e5b7a2fb8e0f75Affected
  • 6286bbb40576ffadfde206c332b61345c19af57f to before 01e86ea22610d98ae6141e428019a6916e79f725Affected
  • 6286bbb40576ffadfde206c332b61345c19af57f to before 9992649f6786921873a9b89dafa5e04d8c5fef2bAffected
LinuxLinux
  • 6.2Affected
  • before 6.2Not affected
  • 6.6.89 through 6.6.*Not affected
  • 6.12.26 through 6.12.*Not affected
  • 6.14.5 through 6.14.*Not affected
  • 6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.