Security tracker / CVE-2025-37830

CVE-2025-37830

cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate()

References

• Debian security tracker
• cve.org

Notes

 carnil> Introduced in 99d6bdf33877 ("cpufreq: add support for CPU DVFS based on SCMI
 carnil> message protocol"). Vulnerable versions: 4.17.

Bugs

Status

Branch	Status
upstream	released (6.15-rc4) [484d3f15cc6cbaa52541d6259778e715b2c83c54]
6.18-upstream-stable	N/A "Fixed before branching point"
6.17-upstream-stable	N/A "Fixed before branching point"
6.14-upstream-stable	released (6.14.5) [cfaca93b8fe317b7faa9af732e0ba8c9081fa018]
6.12-upstream-stable	released (6.12.26) [7ccfadfb2562337b4f0462a86a9746a6eea89718]
6.6-upstream-stable	released (6.6.89) [ea834c90aa7cc80a1b456f7a91432734d5087d16]
6.1-upstream-stable	released (6.1.136) [f9c5423855e3687262d881aeee5cfb3bc8577bff]
5.10-upstream-stable	needed
sid	released (6.12.27-1)
6.12-trixie-security	N/A "Fixed before branching point"
6.1-bookworm-security	released (6.1.137-1)
5.10-bullseye-security	needed