CVE-2025-38609

MEDIUM

MEDIUM Priority: 0.01 BB Relevance: 36/100

Published: 2025-08-19 Modified: 2026-11-05 First seen: 2026-11-05 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local

AC: Low

PR: Low

UI: None

S: Unchanged

C: None

I: None

A: High

Description

In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: Check governor before using governor->name Commit 96ffcdf239de ("PM / devfreq: Remove redundant governor_name from struct devfreq") removes governor_name and uses governor->name to replace it. But devfreq->governor may be NULL and directly using devfreq->governor->name may cause null pointer exception. Move the check of governor to before using governor->name.

Weakness Classification (1)

CWE-476

Affected Software (10)

Vendor	Product	Version
Linux	Linux	96ffcdf239de6f9970178bb7d643e16fd9e68ab9 < f0479e878d4beb45e73c03e574c59f0a23ccd176
Linux	Linux	96ffcdf239de6f9970178bb7d643e16fd9e68ab9 < 631e101728df2a86b8fb761b49fad9712c651f8a
Linux	Linux	96ffcdf239de6f9970178bb7d643e16fd9e68ab9 < 81f50619370045120c133bfdda5b320c8c97d41e
Linux	Linux	96ffcdf239de6f9970178bb7d643e16fd9e68ab9 < d5632359dbc44862fc1ed04093c1f57529830261
Linux	Linux	96ffcdf239de6f9970178bb7d643e16fd9e68ab9 < 2731c68f536fddcb71332db7f8d78c5eb4684c04
Linux	Linux	96ffcdf239de6f9970178bb7d643e16fd9e68ab9 < 75323a49aa603cf5484a6d74d0d329e86d756e11
Linux	Linux	96ffcdf239de6f9970178bb7d643e16fd9e68ab9 < bab7834c03820eb11269bc48f07c3800192460d2
Linux	Linux	5.11
debian	debian_linux	11.0
linux	linux_kernel	5.11 – 5.15.190