Fiche vulnérabilité
CVE-2025-37829 : faille moyenne linux linux kernel (CVSS 5.5)
Description
In the Linux kernel, the following vulnerability has been resolved: cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate() cpufreq_cpu_get_raw() can return NULL when the target CPU is not present in the policy->cpus mask. scpi_cpufreq_get_rate() does not check for this case, which results in a NULL pointer dereference.
En bref
- Sévérité
- Moyenne (CVSS 5.5)
- Vecteur CVSS
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Exploitation active
- Non signalée par la CISA
- Publication
- 8 mai 2025
- Dernière mise à jour
- 17 juin 2026
Produits concernés
- linux linux kernel
- debian debian linux
Références
- Fiche CVE-2025-37829 sur le NVD (NIST)
- git.kernel.org/stable/c/124bddf123311cd1f18bffd63a5d974468d59…
- git.kernel.org/stable/c/19e0eaa62e8831f2bc0285fef3bf8faaa7f3e…
- git.kernel.org/stable/c/28fbd7b13b4d3074b16db913aedc9d8d37ab4…
- git.kernel.org/stable/c/73b24dc731731edf762f9454552cb3a5b7224…
- git.kernel.org/stable/c/8fbaa76690f67a7cbad315f89d607b46e3e06…
- git.kernel.org/stable/c/ad4796f2da495b2cbbd0fccccbcbf63f2aeee…
- git.kernel.org/stable/c/da8ee91e532486055ecf88478d38c2f3dc234…
- git.kernel.org/stable/c/fdf035d9c5436536ffcfea0ac6adeb5dda3c3…
- lists.debian.org/debian-lts-announce/2025/05/msg00030.html
- lists.debian.org/debian-lts-announce/2025/05/msg00045.html