In the Linux kernel, the following vulnerability has been resolved:
PM / devfreq: Check governor before using governor->name
Commit 96ffcdf239de ("PM / devfreq: Remove redundant governorname from struct devfreq") removes governorname and uses governor->name to replace it. But devfreq->governor may be NULL and directly using devfreq->governor->name may cause null pointer exception. Move the check of governor to before using governor->name.
[
{
"id": "CVE-2025-38609-24214da5",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f0479e878d4beb45e73c03e574c59f0a23ccd176",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"163558765094448851140293389000194281150",
"206649590299618181376585093442040129",
"310427308329526900499177964020460086906",
"6388646872755145128537723121616775386",
"308025528501010944106609520536783463231",
"55718985319353028039741515929066243580",
"73376721806811453197440274920023996101",
"20384131057451354093897843699395363584",
"86510945164749274038346867601757639714",
"159762086957480041697409147167358906103"
]
},
"target": {
"file": "drivers/devfreq/devfreq.c"
}
},
{
"id": "CVE-2025-38609-3ef705c3",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2731c68f536fddcb71332db7f8d78c5eb4684c04",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "99218076892076127672280199100939347495",
"length": 976.0
},
"target": {
"function": "devfreq_remove_governor",
"file": "drivers/devfreq/devfreq.c"
}
},
{
"id": "CVE-2025-38609-742719c4",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d5632359dbc44862fc1ed04093c1f57529830261",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "99218076892076127672280199100939347495",
"length": 976.0
},
"target": {
"function": "devfreq_remove_governor",
"file": "drivers/devfreq/devfreq.c"
}
},
{
"id": "CVE-2025-38609-b0d606d5",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f0479e878d4beb45e73c03e574c59f0a23ccd176",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "99218076892076127672280199100939347495",
"length": 976.0
},
"target": {
"function": "devfreq_remove_governor",
"file": "drivers/devfreq/devfreq.c"
}
},
{
"id": "CVE-2025-38609-db43b613",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2731c68f536fddcb71332db7f8d78c5eb4684c04",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"163558765094448851140293389000194281150",
"206649590299618181376585093442040129",
"310427308329526900499177964020460086906",
"6388646872755145128537723121616775386",
"308025528501010944106609520536783463231",
"55718985319353028039741515929066243580",
"73376721806811453197440274920023996101",
"20384131057451354093897843699395363584",
"86510945164749274038346867601757639714",
"159762086957480041697409147167358906103"
]
},
"target": {
"file": "drivers/devfreq/devfreq.c"
}
},
{
"id": "CVE-2025-38609-ff5d1b1a",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d5632359dbc44862fc1ed04093c1f57529830261",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"163558765094448851140293389000194281150",
"206649590299618181376585093442040129",
"310427308329526900499177964020460086906",
"6388646872755145128537723121616775386",
"308025528501010944106609520536783463231",
"55718985319353028039741515929066243580",
"73376721806811453197440274920023996101",
"20384131057451354093897843699395363584",
"86510945164749274038346867601757639714",
"159762086957480041697409147167358906103"
]
},
"target": {
"file": "drivers/devfreq/devfreq.c"
}
}
]