NetSight
IP …
medium5.5

CVE-2025-38609

In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: Check governor before using governor->name Commit 96ffcdf239de ("PM / devfreq…

Impact

In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: Check governor before using governor->name Commit 96ffcdf239de ("PM / devfreq: Remove redundant governor_name from struct devfreq") removes governor_name and uses governor->name to replace it. But devfreq->governor may be NULL and directly using devfreq->governor->name may cause null pointer exception. Move the check of governor to before using governor->name.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.11 before 5.15.190
from 5.16 before 6.1.148
from 6.2 before 6.6.102
from 6.7 before 6.12.42
from 6.13 before 6.15.10
from 6.16 before 6.16.1
DebianDebian Linux
Version 11.0

Weakness classification

CWE-476

References