CVE-2025-38610

Source
https://cve.org/CVERecord?id=CVE-2025-38610
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-38610.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-38610
Downstream
Related
Published
2025-08-19T17:03:53.255Z
Modified
2026-05-18T05:58:07.063040842Z
Summary
powercap: dtpm_cpu: Fix NULL pointer dereference in get_pd_power_uw()
Details

In the Linux kernel, the following vulnerability has been resolved:

powercap: dtpmcpu: Fix NULL pointer dereference in getpdpoweruw()

The getpdpoweruw() function can crash with a NULL pointer dereference when emcpuget() returns NULL. This occurs when a CPU becomes impossible during runtime, causing getcpudevice() to return NULL, which propagates through emcpuget() and leads to a crash when emspan_cpus() dereferences the NULL pointer.

Add a NULL check after emcpuget() and return 0 if unavailable, matching the existing fallback behavior in __dtpmcpusetup().

[ rjw: Drop an excess empty code line ]

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38610.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
eb82bace893169b319c563b7f813c58a0a5a9f76
Fixed
27914f2b795e2b58e9506f281dcdd98fef09d3c2
Fixed
c6ec27091cf5ac05094c1fe3a6ce914cf711a37c
Fixed
8374ac7d69a57d737e701a851ffe980a0d27d3ad
Fixed
27e0318f0ea69fcfa32228847debc384ade14578
Fixed
2fd001a0075ac01dc64a28a8e21226b3d989a91d
Fixed
46dc57406887dd02565cb264224194a6776d882b

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-38610.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.148
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.102
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.42
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.15.10
Type
ECOSYSTEM
Events
Introduced
6.16.0
Fixed
6.16.1

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-38610.json"