CVE-2025-68177

Linux Kernel - Denial of Service via NULL Policy Dereference in longhaul_exit

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: cpufreq/longhaul: handle NULL policy in longhaul_exit longhaul_exit() was calling cpufreq_cpu_get(0) without checking for a NULL policy pointer. On some systems, this could lead to a NULL dereference and a kernel warning or panic. This patch adds a check using unlikely() and returns early if the policy is NULL. Bugzilla: #219962

References (8)

Core 8

Scores

EPSS 0.0006
EPSS Percentile 18.3%

Details

Status published
Products (25)
linux/Kernel 3.10.0 - 5.4.302linux
linux/Kernel 5.11.0 - 5.15.197linux
linux/Kernel 5.16.0 - 6.1.159linux
linux/Kernel 5.5.0 - 5.10.247linux
linux/Kernel 6.13.0 - 6.17.8linux
linux/Kernel 6.2.0 - 6.6.117linux
linux/Kernel 6.7.0 - 6.12.58linux
Linux/Linux < 3.10
Linux/Linux 3.10
Linux/Linux 5.10.247 - 5.10.*
... and 15 more
Published Dec 16, 2025
Tracked Since Feb 18, 2026