In the Linux kernel, the following vulnerability has been resolved:
cpufreq: scmi: Fix null-ptr-deref in scmicpufreqget_rate()
cpufreqcpugetraw() can return NULL when the target CPU is not present in the policy->cpus mask. scmicpufreqgetrate() does not check for this case, which results in a NULL pointer dereference.
Add NULL check after cpufreqcpuget_raw() to prevent this issue.
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/37xxx/CVE-2025-37830.json"
}"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-37830.json"
[
{
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f9c5423855e3687262d881aeee5cfb3bc8577bff",
"id": "CVE-2025-37830-3dfc8347",
"digest": {
"function_hash": "44456005817650752887181569166047997889",
"length": 275.0
},
"target": {
"function": "scmi_cpufreq_get_rate",
"file": "drivers/cpufreq/scmi-cpufreq.c"
}
},
{
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f9c5423855e3687262d881aeee5cfb3bc8577bff",
"id": "CVE-2025-37830-e3110d05",
"digest": {
"line_hashes": [
"322887329250219009112112134753590938749",
"241789827339676634278646787807260070125",
"264976350635280536983300367844007751914",
"60296660267168603646094228326696724150",
"34771789417766511116172063239484528389",
"43815854987823607766722668314402260390",
"215870771554739811531511945170533116223"
],
"threshold": 0.9
},
"target": {
"file": "drivers/cpufreq/scmi-cpufreq.c"
}
}
]