NetSight
IP …
medium5.5

CVE-2025-37830

In the Linux kernel, the following vulnerability has been resolved: cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate() cpufreq_cpu_get_raw() can retu…

Impact

In the Linux kernel, the following vulnerability has been resolved: cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate() cpufreq_cpu_get_raw() can return NULL when the target CPU is not present in the policy->cpus mask. scmi_cpufreq_get_rate() does not check for this case, which results in a NULL pointer dereference. Add NULL check after cpufreq_cpu_get_raw() to prevent this issue.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.17 before 5.15.181
from 5.16 before 6.1.136
from 6.2 before 6.6.89
from 6.7 before 6.12.26
from 6.13 before 6.14.5
Version 6.15
DebianDebian Linux
Version 11.0

Weakness classification

CWE-476

References