CVE-2025-38609

PM / devfreq: Check governor before using governor->name

State: Published
Severity: Not scored
Published: Aug 19, 2025
Updated: May 11, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

PM / devfreq: Check governor before using governor->name

Commit 96ffcdf239de ("PM / devfreq: Remove redundant governor_name from struct devfreq") removes governor_name and uses governor->name to replace it. But devfreq->governor may be NULL and directly using devfreq->governor->name may cause null pointer exception. Move the check of governor to before using governor->name.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	96ffcdf239de6f9970178bb7d643e16fd9e68ab9 to before f0479e878d4beb45e73c03e574c59f0a23ccd176Affected 96ffcdf239de6f9970178bb7d643e16fd9e68ab9 to before 631e101728df2a86b8fb761b49fad9712c651f8aAffected 96ffcdf239de6f9970178bb7d643e16fd9e68ab9 to before 81f50619370045120c133bfdda5b320c8c97d41eAffected 96ffcdf239de6f9970178bb7d643e16fd9e68ab9 to before d5632359dbc44862fc1ed04093c1f57529830261Affected 96ffcdf239de6f9970178bb7d643e16fd9e68ab9 to before 2731c68f536fddcb71332db7f8d78c5eb4684c04Affected 96ffcdf239de6f9970178bb7d643e16fd9e68ab9 to before 75323a49aa603cf5484a6d74d0d329e86d756e11Affected 96ffcdf239de6f9970178bb7d643e16fd9e68ab9 to before bab7834c03820eb11269bc48f07c3800192460d2Affected
LinuxLinux	5.11Affected before 5.11Not affected 5.15.190 through 5.15.Not affected 6.1.148 through 6.1.Not affected 6.6.102 through 6.6.Not affected 6.12.42 through 6.12.Not affected 6.15.10 through 6.15.Not affected 6.16.1 through 6.16.Not affected 6.17 and laterNot affected

Product

Versions

LinuxLinux

96ffcdf239de6f9970178bb7d643e16fd9e68ab9 to before f0479e878d4beb45e73c03e574c59f0a23ccd176Affected
96ffcdf239de6f9970178bb7d643e16fd9e68ab9 to before 631e101728df2a86b8fb761b49fad9712c651f8aAffected
96ffcdf239de6f9970178bb7d643e16fd9e68ab9 to before 81f50619370045120c133bfdda5b320c8c97d41eAffected
96ffcdf239de6f9970178bb7d643e16fd9e68ab9 to before d5632359dbc44862fc1ed04093c1f57529830261Affected
96ffcdf239de6f9970178bb7d643e16fd9e68ab9 to before 2731c68f536fddcb71332db7f8d78c5eb4684c04Affected
96ffcdf239de6f9970178bb7d643e16fd9e68ab9 to before 75323a49aa603cf5484a6d74d0d329e86d756e11Affected
96ffcdf239de6f9970178bb7d643e16fd9e68ab9 to before bab7834c03820eb11269bc48f07c3800192460d2Affected

LinuxLinux

5.11Affected
before 5.11Not affected
5.15.190 through 5.15.*Not affected
6.1.148 through 6.1.*Not affected
6.6.102 through 6.6.*Not affected
6.12.42 through 6.12.*Not affected
6.15.10 through 6.15.*Not affected
6.16.1 through 6.16.*Not affected
6.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.