Riskcovery

CVE-2025-37841

pm: cpupower: bench: Prevent NULL dereference on malloc failure

State
Published
Severity
Not scored
Published
May 9, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

pm: cpupower: bench: Prevent NULL dereference on malloc failure

If malloc returns NULL due to low memory, 'config' pointer can be NULL. Add a check to prevent NULL dereference.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 7fe2f6399a84760a9af8896ac152728250f82adb to before 34a9394794b0f97af6afedc0c9ee2012c24b28edAffected
  • 7fe2f6399a84760a9af8896ac152728250f82adb to before 79bded9d70142d2a11d931fc029afece471641dbAffected
  • 7fe2f6399a84760a9af8896ac152728250f82adb to before 0e297a02e03dceb2874789ca40bd4e65c5371704Affected
  • 7fe2f6399a84760a9af8896ac152728250f82adb to before 87b9f0867c0afa7e892f4b30c36cff6bf2707f85Affected
  • 7fe2f6399a84760a9af8896ac152728250f82adb to before 942a4b97fc77516678b1d8af1521ff9a94c13b3eAffected
  • 7fe2f6399a84760a9af8896ac152728250f82adb to before f8d28fa305b78c5d1073b63f26db265ba8291ae1Affected
  • 7fe2f6399a84760a9af8896ac152728250f82adb to before ceec06f464d5cfc0ba966225f7d50506ceb62242Affected
  • 7fe2f6399a84760a9af8896ac152728250f82adb to before 5e38122aa3fd0f9788186e86a677925bfec0b2d1Affected
  • 7fe2f6399a84760a9af8896ac152728250f82adb to before 208baa3ec9043a664d9acfb8174b332e6b17fb69Affected
LinuxLinux
  • 3.1Affected
  • before 3.1Not affected
  • 5.4.293 through 5.4.*Not affected
  • 5.10.237 through 5.10.*Not affected
  • 5.15.181 through 5.15.*Not affected
  • 6.1.135 through 6.1.*Not affected
  • 6.6.88 through 6.6.*Not affected
  • 6.12.24 through 6.12.*Not affected
  • 6.13.12 through 6.13.*Not affected
  • 6.14.3 through 6.14.*Not affected
  • 6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.