PT-2025-51590 · Linux+3 · Linux Kernel+3

Published

2025-09-01

·

Updated

2026-05-07

·

CVE-2025-68177

CVSS v2.0

5.5

Medium

VectorAV:A/AC:L/Au:S/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The Linux kernel contains a flaw within the cpufreq/longhaul component. Specifically, the longhaul exit() function calls cpufreq cpu get(0) without verifying if the policy pointer is NULL. This can result in a NULL dereference, potentially leading to a kernel warning or system panic. A patch has been implemented to add a check using unlikely() and return early if the policy is NULL, preventing the dereference.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2026-01262
CVE-2025-68177
ECHO-41B5-A2A0-630A
MGASA-2026-0017
MGASA-2026-0018
USN-8029-1
USN-8029-2
USN-8029-3
USN-8030-1
USN-8048-1
USN-8095-1
USN-8095-2
USN-8095-3
USN-8095-4
USN-8095-5
USN-8096-1
USN-8096-2
USN-8096-3
USN-8096-4
USN-8096-5
USN-8100-1
USN-8116-1
USN-8125-1
USN-8126-1
USN-8141-1
USN-8163-1
USN-8163-2
USN-8165-1
USN-8243-1
USN-8261-1

Affected Products

Debian
Linuxmint
Linux Kernel
Ubuntu