CVE-2025-37830

Source
https://nvd.nist.gov/vuln/detail/CVE-2025-37830
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-37830.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-37830
Downstream
Related
Published
2025-05-08T07:15:54Z
Modified
2025-08-09T20:01:25Z
Summary
[none]
Details

In the Linux kernel, the following vulnerability has been resolved:

cpufreq: scmi: Fix null-ptr-deref in scmicpufreqget_rate()

cpufreqcpugetraw() can return NULL when the target CPU is not present in the policy->cpus mask. scmicpufreqgetrate() does not check for this case, which results in a NULL pointer dereference.

Add NULL check after cpufreqcpuget_raw() to prevent this issue.

References

Affected packages