CVE-2025-38609: falha em Linux
PM / devfreq: Check governor before using governor->name
Publicada em · Atualizada em
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 0.2%
probabilidade de exploração
0.2%top 94% das CVEs
exploração observada
nãonenhuma fonte reporta
In the Linux kernel, the following vulnerability has been resolved:
PM / devfreq: Check governor before using governor->name
Commit 96ffcdf239de ("PM / devfreq: Remove redundant governor_name from
struct devfreq") removes governor_name and uses governor->name to replace
it. But devfreq->governor may be NULL and directly using
devfreq->governor->name may cause null pointer exception. Move the check of
governor to before using governor->name.
Produtos afetados
Linux · LinuxCVEs relacionadas — Linux
No mesmo produto, das mais perigosas para as menos.
CVE-2024-53197HIGHALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devicesEPSS 4.1%KEVCVE-2026-31431HIGHcrypto: algif_aead - Revert to operating out-of-placeEPSS 3.4%KEVCVE-2024-53104HIGHmedia: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_formatEPSS 3.4%KEVCVE-2025-39682CRITICALtls: fix handling of zero-length records on the rx_listEPSS 2.9%KEVCVE-2024-36971HIGHnet: fix __dst_negative_advice() raceEPSS 2.7%KEVCVE-2025-39964HIGHcrypto: af_alg - Disallow concurrent writes in af_alg_sendmsgEPSS 1.4%KEV
Referências
https://git.kernel.org/stable/c/2731c68f536fddcb71332db7f8d78c5eb4684c04https://git.kernel.org/stable/c/631e101728df2a86b8fb761b49fad9712c651f8ahttps://git.kernel.org/stable/c/75323a49aa603cf5484a6d74d0d329e86d756e11https://git.kernel.org/stable/c/81f50619370045120c133bfdda5b320c8c97d41ehttps://git.kernel.org/stable/c/bab7834c03820eb11269bc48f07c3800192460d2https://git.kernel.org/stable/c/d5632359dbc44862fc1ed04093c1f57529830261https://git.kernel.org/stable/c/f0479e878d4beb45e73c03e574c59f0a23ccd176https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html