Description
In the Linux kernel, the following vulnerability has been resolved:
cpufreq/longhaul: handle NULL policy in longhaul_exit
longhaul_exit() was calling cpufreq_cpu_get(0) without checking for a NULL policy pointer. On some systems, this could lead to a NULL dereference and a kernel warning or panic.
This patch adds a check using unlikely() and returns early if the policy is NULL.
Bugzilla: #219962
Metrics
No CVSS score has been published yet.
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= b43a7ffbf33be7e4d3b10b7714ee663ea2c52fe2, < b02352dd2e6cca98777714cc2a27553191df70db; >= b43a7ffbf33be7e4d3b10b7714ee663ea2c52fe2, < 956b56d17a89775e4957bbddefa45cd3c6c71000; >= b43a7ffbf33be7e4d3b10b7714ee663ea2c52fe2, < 55cf586b9556863e3c2a45460aba71bcb2be5bcd; >= b43a7ffbf33be7e4d3b10b7714ee663ea2c52fe2, < fd93e1d71b3b14443092919be12b1abf08de35eb; >= b43a7ffbf33be7e4d3b10b7714ee663ea2c52fe2, < 8d6791c480f22d6e9a566eaa77336d3d37c5c591; >= b43a7ffbf33be7e4d3b10b7714ee663ea2c52fe2, < 64adabb6d9d51b7e7c02fe733346a2c4dd738488; >= b43a7ffbf33be7e4d3b10b7714ee663ea2c52fe2, < 809cf2a7794ca4c14c304b349f4c3ae220701ce4; >= b43a7ffbf33be7e4d3b10b7714ee663ea2c52fe2, < 592532a77b736b5153e0c2e4c74aa50af0a352ab |
| Linux | Linux | 3.10 |
References
- https://git.kernel.org/stable/c/55cf586b9556863e3c2a45460aba71bcb2be5bcd
- https://git.kernel.org/stable/c/592532a77b736b5153e0c2e4c74aa50af0a352ab
- https://git.kernel.org/stable/c/64adabb6d9d51b7e7c02fe733346a2c4dd738488
- https://git.kernel.org/stable/c/809cf2a7794ca4c14c304b349f4c3ae220701ce4
- https://git.kernel.org/stable/c/8d6791c480f22d6e9a566eaa77336d3d37c5c591
- https://git.kernel.org/stable/c/956b56d17a89775e4957bbddefa45cd3c6c71000
- https://git.kernel.org/stable/c/b02352dd2e6cca98777714cc2a27553191df70db
- https://git.kernel.org/stable/c/fd93e1d71b3b14443092919be12b1abf08de35eb
Timeline
- Published
- Dec 16, 2025
- Last modified
- Oct 14, 2026
- NVD status
- Deferred