Vulnerability in Linux

CVE-2025-68177

In the Linux kernel, the following vulnerability has been resolved: cpufreq/longhaul: handle NULL policy in longhaul_exit longhaul_exit() was calling cpufreq_cpu_get(0) without checking for a NULL policy pointer. On some systems, this could lead to a NULL dereference and a kernel warning or panic. This patch adds a check using unlikely() and returns early if the policy is NULL. Bugzilla: #219962

EPSS: 0.002 (8.2th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions b43a7ffbf33be7e4d3b10b7714ee663ea2c52fe2, 3.10, 0

References