---
id: CVE-2025-37829
title: 'cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate()'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate()

  cpufreq_cpu_get_raw() can return NULL when the target CPU is not present
  in the policy->cpus mask. scpi_cp…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 343a8d17fa8d6dd97f408e8fedbcef12073f3774 <
    ad4796f2da495b2cbbd0fccccbcbf63f2aeee613
  - >-
    Linux >= 343a8d17fa8d6dd97f408e8fedbcef12073f3774 <
    fdf035d9c5436536ffcfea0ac6adeb5dda3c3a23
  - >-
    Linux >= 343a8d17fa8d6dd97f408e8fedbcef12073f3774 <
    8fbaa76690f67a7cbad315f89d607b46e3e06ede
  - >-
    Linux >= 343a8d17fa8d6dd97f408e8fedbcef12073f3774 <
    da8ee91e532486055ecf88478d38c2f3dc234182
  - >-
    Linux >= 343a8d17fa8d6dd97f408e8fedbcef12073f3774 <
    19e0eaa62e8831f2bc0285fef3bf8faaa7f3e09b
  - >-
    Linux >= 343a8d17fa8d6dd97f408e8fedbcef12073f3774 <
    28fbd7b13b4d3074b16db913aedc9d8d37ab41e7
  - >-
    Linux >= 343a8d17fa8d6dd97f408e8fedbcef12073f3774 <
    124bddf123311cd1f18bffd63a5d974468d59c67
  - >-
    Linux >= 343a8d17fa8d6dd97f408e8fedbcef12073f3774 <
    73b24dc731731edf762f9454552cb3a5b7224949
  - Linux 4.16
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T20:41:28.588890Z'
published: '2025-05-08'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T20:41:55.417Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-37829'
references:
  - url: 'https://git.kernel.org/stable/c/ad4796f2da495b2cbbd0fccccbcbf63f2aeee613'
  - url: 'https://git.kernel.org/stable/c/fdf035d9c5436536ffcfea0ac6adeb5dda3c3a23'
  - url: 'https://git.kernel.org/stable/c/8fbaa76690f67a7cbad315f89d607b46e3e06ede'
  - url: 'https://git.kernel.org/stable/c/da8ee91e532486055ecf88478d38c2f3dc234182'
  - url: 'https://git.kernel.org/stable/c/19e0eaa62e8831f2bc0285fef3bf8faaa7f3e09b'
  - url: 'https://git.kernel.org/stable/c/28fbd7b13b4d3074b16db913aedc9d8d37ab41e7'
  - url: 'https://git.kernel.org/stable/c/124bddf123311cd1f18bffd63a5d974468d59c67'
  - url: 'https://git.kernel.org/stable/c/73b24dc731731edf762f9454552cb3a5b7224949'
tags:
  - cve.org
epss: 0.00209
epssPercentile: 0.11144
ingestedAt: '2026-11-05T22:38:31.873Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate()

cpufreq_cpu_get_raw() can return NULL when the target CPU is not present
in the policy->cpus mask. scpi_cpufreq_get_rate() does not check for
this case, which results in a NULL pointer dereference.

## Affected

- `Linux >= 343a8d17fa8d6dd97f408e8fedbcef12073f3774 < ad4796f2da495b2cbbd0fccccbcbf63f2aeee613`
- `Linux >= 343a8d17fa8d6dd97f408e8fedbcef12073f3774 < fdf035d9c5436536ffcfea0ac6adeb5dda3c3a23`
- `Linux >= 343a8d17fa8d6dd97f408e8fedbcef12073f3774 < 8fbaa76690f67a7cbad315f89d607b46e3e06ede`
- `Linux >= 343a8d17fa8d6dd97f408e8fedbcef12073f3774 < da8ee91e532486055ecf88478d38c2f3dc234182`
- `Linux >= 343a8d17fa8d6dd97f408e8fedbcef12073f3774 < 19e0eaa62e8831f2bc0285fef3bf8faaa7f3e09b`
- `Linux >= 343a8d17fa8d6dd97f408e8fedbcef12073f3774 < 28fbd7b13b4d3074b16db913aedc9d8d37ab41e7`
- `Linux >= 343a8d17fa8d6dd97f408e8fedbcef12073f3774 < 124bddf123311cd1f18bffd63a5d974468d59c67`
- `Linux >= 343a8d17fa8d6dd97f408e8fedbcef12073f3774 < 73b24dc731731edf762f9454552cb3a5b7224949`
- `Linux 4.16`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.