github - ghsa-p285-vxm3-73m7

ghsa-p285-vxm3-73m7

Vulnerability from github

Published

2025-05-08 09:30

Modified

2025-05-08 09:30

Details

In the Linux kernel, the following vulnerability has been resolved:

cpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate()

cpufreq_cpu_get_raw() can return NULL when the target CPU is not present in the policy->cpus mask. apple_soc_cpufreq_get_rate() does not check for this case, which results in a NULL pointer dereference.

Show details on source website

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2025-37831"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-05-08T07:15:54Z",
    "severity": null
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ncpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate()\n\ncpufreq_cpu_get_raw() can return NULL when the target CPU is not present\nin the policy-\u003ecpus mask. apple_soc_cpufreq_get_rate() does not check\nfor this case, which results in a NULL pointer dereference.",
  "id": "GHSA-p285-vxm3-73m7",
  "modified": "2025-05-08T09:30:25Z",
  "published": "2025-05-08T09:30:25Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-37831"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/01e86ea22610d98ae6141e428019a6916e79f725"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/1053dcf8a504d4933bb3f73df22bc363298d194b"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/9992649f6786921873a9b89dafa5e04d8c5fef2b"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/fbdba5f37413dbc09d82ad7235e5b7a2fb8e0f75"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

CVE-2025-37831 (GCVE-0-2025-37831)

Vulnerability from cvelistv5

Published

2025-05-08 06:26

Modified

2025-05-26 05:21

Severity ?

Summary

In the Linux kernel, the following vulnerability has been resolved: cpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate() cpufreq_cpu_get_raw() can return NULL when the target CPU is not present in the policy->cpus mask. apple_soc_cpufreq_get_rate() does not check for this case, which results in a NULL pointer dereference.

References

URL

Tags

	https://git.kernel.org/stable/c/1053dcf8a504d4933bb3f73df22bc363298d194b
	https://git.kernel.org/stable/c/fbdba5f37413dbc09d82ad7235e5b7a2fb8e0f75
	https://git.kernel.org/stable/c/01e86ea22610d98ae6141e428019a6916e79f725
	https://git.kernel.org/stable/c/9992649f6786921873a9b89dafa5e04d8c5fef2b

Impacted products

Vendor

Product

Version

Version: 6286bbb40576ffadfde206c332b61345c19af57f
Version: 6286bbb40576ffadfde206c332b61345c19af57f
Version: 6286bbb40576ffadfde206c332b61345c19af57f
Version: 6286bbb40576ffadfde206c332b61345c19af57f

Version: 6.2

Show details on NVD website

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/cpufreq/apple-soc-cpufreq.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "1053dcf8a504d4933bb3f73df22bc363298d194b",
              "status": "affected",
              "version": "6286bbb40576ffadfde206c332b61345c19af57f",
              "versionType": "git"
            },
            {
              "lessThan": "fbdba5f37413dbc09d82ad7235e5b7a2fb8e0f75",
              "status": "affected",
              "version": "6286bbb40576ffadfde206c332b61345c19af57f",
              "versionType": "git"
            },
            {
              "lessThan": "01e86ea22610d98ae6141e428019a6916e79f725",
              "status": "affected",
              "version": "6286bbb40576ffadfde206c332b61345c19af57f",
              "versionType": "git"
            },
            {
              "lessThan": "9992649f6786921873a9b89dafa5e04d8c5fef2b",
              "status": "affected",
              "version": "6286bbb40576ffadfde206c332b61345c19af57f",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/cpufreq/apple-soc-cpufreq.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.2"
            },
            {
              "lessThan": "6.2",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.89",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.26",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.14.*",
              "status": "unaffected",
              "version": "6.14.5",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.15",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.89",
                  "versionStartIncluding": "6.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.26",
                  "versionStartIncluding": "6.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.14.5",
                  "versionStartIncluding": "6.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.15",
                  "versionStartIncluding": "6.2",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate()\n\ncpufreq_cpu_get_raw() can return NULL when the target CPU is not present\nin the policy-\u003ecpus mask. apple_soc_cpufreq_get_rate() does not check\nfor this case, which results in a NULL pointer dereference."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-26T05:21:50.541Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/1053dcf8a504d4933bb3f73df22bc363298d194b"
        },
        {
          "url": "https://git.kernel.org/stable/c/fbdba5f37413dbc09d82ad7235e5b7a2fb8e0f75"
        },
        {
          "url": "https://git.kernel.org/stable/c/01e86ea22610d98ae6141e428019a6916e79f725"
        },
        {
          "url": "https://git.kernel.org/stable/c/9992649f6786921873a9b89dafa5e04d8c5fef2b"
        }
      ],
      "title": "cpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate()",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2025-37831",
    "datePublished": "2025-05-08T06:26:22.328Z",
    "dateReserved": "2025-04-16T04:51:23.951Z",
    "dateUpdated": "2025-05-26T05:21:50.541Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Log in or create an account to share your comment.

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.