{"id":"CVE-2025-37829","title":"cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate()","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\ncpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate()\n\ncpufreq_cpu_get_raw() can return NULL when the target CPU is not present\nin the policy->cpus mask. scpi_cp…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 343a8d17fa8d6dd97f408e8fedbcef12073f3774 < ad4796f2da495b2cbbd0fccccbcbf63f2aeee613","Linux >= 343a8d17fa8d6dd97f408e8fedbcef12073f3774 < fdf035d9c5436536ffcfea0ac6adeb5dda3c3a23","Linux >= 343a8d17fa8d6dd97f408e8fedbcef12073f3774 < 8fbaa76690f67a7cbad315f89d607b46e3e06ede","Linux >= 343a8d17fa8d6dd97f408e8fedbcef12073f3774 < da8ee91e532486055ecf88478d38c2f3dc234182","Linux >= 343a8d17fa8d6dd97f408e8fedbcef12073f3774 < 19e0eaa62e8831f2bc0285fef3bf8faaa7f3e09b","Linux >= 343a8d17fa8d6dd97f408e8fedbcef12073f3774 < 28fbd7b13b4d3074b16db913aedc9d8d37ab41e7","Linux >= 343a8d17fa8d6dd97f408e8fedbcef12073f3774 < 124bddf123311cd1f18bffd63a5d974468d59c67","Linux >= 343a8d17fa8d6dd97f408e8fedbcef12073f3774 < 73b24dc731731edf762f9454552cb3a5b7224949","Linux 4.16"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-05T20:41:28.588890Z"},"published":"2025-05-08","updated":"2026-11-05","sourceUpdated":"2026-11-05T20:41:55.417Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-37829","references":[{"url":"https://git.kernel.org/stable/c/ad4796f2da495b2cbbd0fccccbcbf63f2aeee613"},{"url":"https://git.kernel.org/stable/c/fdf035d9c5436536ffcfea0ac6adeb5dda3c3a23"},{"url":"https://git.kernel.org/stable/c/8fbaa76690f67a7cbad315f89d607b46e3e06ede"},{"url":"https://git.kernel.org/stable/c/da8ee91e532486055ecf88478d38c2f3dc234182"},{"url":"https://git.kernel.org/stable/c/19e0eaa62e8831f2bc0285fef3bf8faaa7f3e09b"},{"url":"https://git.kernel.org/stable/c/28fbd7b13b4d3074b16db913aedc9d8d37ab41e7"},{"url":"https://git.kernel.org/stable/c/124bddf123311cd1f18bffd63a5d974468d59c67"},{"url":"https://git.kernel.org/stable/c/73b24dc731731edf762f9454552cb3a5b7224949"}],"tags":["cve.org"],"epss":0.00209,"epssPercentile":0.11144,"ingestedAt":"2026-11-05T22:38:31.873Z","slug":"CVE-2025-37829","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ncpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate()\n\ncpufreq_cpu_get_raw() can return NULL when the target CPU is not present\nin the policy->cpus mask. scpi_cpufreq_get_rate() does not check for\nthis case, which results in a NULL pointer dereference.\n\n## Affected\n\n- `Linux >= 343a8d17fa8d6dd97f408e8fedbcef12073f3774 < ad4796f2da495b2cbbd0fccccbcbf63f2aeee613`\n- `Linux >= 343a8d17fa8d6dd97f408e8fedbcef12073f3774 < fdf035d9c5436536ffcfea0ac6adeb5dda3c3a23`\n- `Linux >= 343a8d17fa8d6dd97f408e8fedbcef12073f3774 < 8fbaa76690f67a7cbad315f89d607b46e3e06ede`\n- `Linux >= 343a8d17fa8d6dd97f408e8fedbcef12073f3774 < da8ee91e532486055ecf88478d38c2f3dc234182`\n- `Linux >= 343a8d17fa8d6dd97f408e8fedbcef12073f3774 < 19e0eaa62e8831f2bc0285fef3bf8faaa7f3e09b`\n- `Linux >= 343a8d17fa8d6dd97f408e8fedbcef12073f3774 < 28fbd7b13b4d3074b16db913aedc9d8d37ab41e7`\n- `Linux >= 343a8d17fa8d6dd97f408e8fedbcef12073f3774 < 124bddf123311cd1f18bffd63a5d974468d59c67`\n- `Linux >= 343a8d17fa8d6dd97f408e8fedbcef12073f3774 < 73b24dc731731edf762f9454552cb3a5b7224949`\n- `Linux 4.16`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}