Riskcovery

CVE-2025-68177

cpufreq/longhaul: handle NULL policy in longhaul_exit

State
Published
Severity
Not scored
Published
Dec 16, 2025
Updated
May 11, 2026
Reserved
Dec 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

cpufreq/longhaul: handle NULL policy in longhaul_exit

longhaul_exit() was calling cpufreq_cpu_get(0) without checking for a NULL policy pointer. On some systems, this could lead to a NULL dereference and a kernel warning or panic.

This patch adds a check using unlikely() and returns early if the policy is NULL.

Bugzilla: #219962

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • b43a7ffbf33be7e4d3b10b7714ee663ea2c52fe2 to before b02352dd2e6cca98777714cc2a27553191df70dbAffected
  • b43a7ffbf33be7e4d3b10b7714ee663ea2c52fe2 to before 956b56d17a89775e4957bbddefa45cd3c6c71000Affected
  • b43a7ffbf33be7e4d3b10b7714ee663ea2c52fe2 to before 55cf586b9556863e3c2a45460aba71bcb2be5bcdAffected
  • b43a7ffbf33be7e4d3b10b7714ee663ea2c52fe2 to before fd93e1d71b3b14443092919be12b1abf08de35ebAffected
  • b43a7ffbf33be7e4d3b10b7714ee663ea2c52fe2 to before 8d6791c480f22d6e9a566eaa77336d3d37c5c591Affected
  • b43a7ffbf33be7e4d3b10b7714ee663ea2c52fe2 to before 64adabb6d9d51b7e7c02fe733346a2c4dd738488Affected
  • b43a7ffbf33be7e4d3b10b7714ee663ea2c52fe2 to before 809cf2a7794ca4c14c304b349f4c3ae220701ce4Affected
  • b43a7ffbf33be7e4d3b10b7714ee663ea2c52fe2 to before 592532a77b736b5153e0c2e4c74aa50af0a352abAffected
LinuxLinux
  • 3.10Affected
  • before 3.10Not affected
  • 5.4.302 through 5.4.*Not affected
  • 5.10.247 through 5.10.*Not affected
  • 5.15.197 through 5.15.*Not affected
  • 6.1.159 through 6.1.*Not affected
  • 6.6.117 through 6.6.*Not affected
  • 6.12.58 through 6.12.*Not affected
  • 6.17.8 through 6.17.*Not affected
  • 6.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.