CVE-2025-38609: fallo en Linux
PM / devfreq: Check governor before using governor->name
Publicada el · Actualizada el
3Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackepss 0.2%
probabilidad de explotación
0.2%top 94% de las CVE
explotación observada
noninguna fuente lo reporta
In the Linux kernel, the following vulnerability has been resolved:
PM / devfreq: Check governor before using governor->name
Commit 96ffcdf239de ("PM / devfreq: Remove redundant governor_name from
struct devfreq") removes governor_name and uses governor->name to replace
it. But devfreq->governor may be NULL and directly using
devfreq->governor->name may cause null pointer exception. Move the check of
governor to before using governor->name.
Productos afectados
Linux · LinuxCVEs relacionadas — Linux
En el mismo producto, de las más peligrosas a las menos.
CVE-2024-53197HIGHALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devicesEPSS 4.1%KEVCVE-2026-31431HIGHcrypto: algif_aead - Revert to operating out-of-placeEPSS 3.4%KEVCVE-2024-53104HIGHmedia: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_formatEPSS 3.4%KEVCVE-2025-39682CRITICALtls: fix handling of zero-length records on the rx_listEPSS 2.9%KEVCVE-2024-36971HIGHnet: fix __dst_negative_advice() raceEPSS 2.7%KEVCVE-2025-39964HIGHcrypto: af_alg - Disallow concurrent writes in af_alg_sendmsgEPSS 1.4%KEV
Referencias
https://git.kernel.org/stable/c/2731c68f536fddcb71332db7f8d78c5eb4684c04https://git.kernel.org/stable/c/631e101728df2a86b8fb761b49fad9712c651f8ahttps://git.kernel.org/stable/c/75323a49aa603cf5484a6d74d0d329e86d756e11https://git.kernel.org/stable/c/81f50619370045120c133bfdda5b320c8c97d41ehttps://git.kernel.org/stable/c/bab7834c03820eb11269bc48f07c3800192460d2https://git.kernel.org/stable/c/d5632359dbc44862fc1ed04093c1f57529830261https://git.kernel.org/stable/c/f0479e878d4beb45e73c03e574c59f0a23ccd176https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html