In the Linux kernel, the following vulnerability has been resolved:
powercap: dtpmcpu: Fix NULL pointer dereference in getpdpoweruw()
The getpdpoweruw() function can crash with a NULL pointer dereference when emcpuget() returns NULL. This occurs when a CPU becomes impossible during runtime, causing getcpudevice() to return NULL, which propagates through emcpuget() and leads to a crash when emspan_cpus() dereferences the NULL pointer.
Add a NULL check after emcpuget() and return 0 if unavailable, matching the existing fallback behavior in _dtpmcpu_setup().
[ rjw: Drop an excess empty code line ]
[
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"214111065634726063805648459272888012417",
"20248519575073064889407182729780563776",
"276457565420082268365033242985340267678",
"58565204232255928235697350648915642671"
]
},
"id": "CVE-2025-38610-2e9e1953",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2fd001a0075ac01dc64a28a8e21226b3d989a91d",
"target": {
"file": "drivers/powercap/dtpm_cpu.c"
},
"deprecated": false
},
{
"digest": {
"function_hash": "36959503354860997513818974806622897108",
"length": 486.0
},
"id": "CVE-2025-38610-8b0a96e3",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8374ac7d69a57d737e701a851ffe980a0d27d3ad",
"target": {
"file": "drivers/powercap/dtpm_cpu.c",
"function": "get_pd_power_uw"
},
"deprecated": false
},
{
"digest": {
"function_hash": "36959503354860997513818974806622897108",
"length": 486.0
},
"id": "CVE-2025-38610-8b5337e5",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2fd001a0075ac01dc64a28a8e21226b3d989a91d",
"target": {
"file": "drivers/powercap/dtpm_cpu.c",
"function": "get_pd_power_uw"
},
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"214111065634726063805648459272888012417",
"20248519575073064889407182729780563776",
"276457565420082268365033242985340267678",
"58565204232255928235697350648915642671"
]
},
"id": "CVE-2025-38610-d71a5ee3",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8374ac7d69a57d737e701a851ffe980a0d27d3ad",
"target": {
"file": "drivers/powercap/dtpm_cpu.c"
},
"deprecated": false
}
]