AZL-93551
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-93551.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-93551
- Upstream
- Published
- 2026-07-25T10:17:20Z
- Modified
- 2026-08-28T17:48:13.009532036Z
- Summary
- CVE-2026-64373 affecting package kernel for versions less than 6.6.145.2-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
cpufreq: Fix hotplug-suspend race during reboot
During system reboot, cpufreqsuspend() is called via the kernelrestart() -> deviceshutdown() path. Unlike the normal system suspend path, the reboot path does not call freezeprocesses(), so userspace processes and kernel threads remain active.
This allows CPU hotplug operations to run concurrently with cpufreqsuspend(). The original code has no synchronization with CPU hotplug, leading to a race condition where governordata can be freed by the hotplug path while cpufreq_suspend() is still accessing it, resulting in a null pointer dereference:
Unable to handle kernel NULL pointer dereference Call Trace: dokernelfault+0x28/0x3c cpufreqsuspend+0xdc/0x160 deviceshutdown+0x18/0x200 kernelrestart+0x40/0x80 arm64sys_reboot+0x1b0/0x200
Fix this by adding cpusreadlock()/cpusreadunlock() to cpufreq_suspend() to block CPU hotplug operations while suspend is in progress.
[ rjw: Changelog edits ]
- References