CVE-2025-38113

ACPI: CPPC: Fix NULL pointer dereference when nosmp is used

published July 3, 2025

CVSS
—
EPSS
0%
Percentile
8.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ACPI: CPPC: Fix NULL pointer dereference when nosmp is used

With nosmp in cmdline, other CPUs are not brought up, leaving

their cpc_desc_ptr NULL. CPU0's iteration via for_each_possible_cpu()

dereferences these NULL pointers, causing panic.

Panic backtrace:

[ 0.401123] Unable to handle kernel NULL pointer dereference at virtual address 00000000000000b8

...

[ 0.403255] [<ffffffff809a5818>] cppc_allow_fast_switch+0x6a/0xd4

...

Kernel panic - not syncing: Attempted to kill init!

[ rjw: New subject ]

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00191 · 8.3th percentile
Published
2025-07-03T08:35Z
EPSS history
Timeline
  • 03 JUL 08:35Z
    ACPI: CPPC: Fix NULL pointer dereference when nosmp is used
    cvelistv5