CVE-2025-38610

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
19/08/2025
Last modified:
03/11/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> powercap: dtpm_cpu: Fix NULL pointer dereference in get_pd_power_uw()<br /> <br /> The get_pd_power_uw() function can crash with a NULL pointer dereference<br /> when em_cpu_get() returns NULL. This occurs when a CPU becomes impossible<br /> during runtime, causing get_cpu_device() to return NULL, which propagates<br /> through em_cpu_get() and leads to a crash when em_span_cpus() dereferences<br /> the NULL pointer.<br /> <br /> Add a NULL check after em_cpu_get() and return 0 if unavailable,<br /> matching the existing fallback behavior in __dtpm_cpu_setup().<br /> <br /> [ rjw: Drop an excess empty code line ]

Impact