CVE-2025-38610

powercap: dtpm_cpu: Fix NULL pointer dereference in get_pd_power_uw()

published August 19, 2025

CVSS
—
EPSS
0%
Percentile
5.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

powercap: dtpm_cpu: Fix NULL pointer dereference in get_pd_power_uw()

The get_pd_power_uw() function can crash with a NULL pointer dereference

when em_cpu_get() returns NULL. This occurs when a CPU becomes impossible

during runtime, causing get_cpu_device() to return NULL, which propagates

through em_cpu_get() and leads to a crash when em_span_cpus() dereferences

the NULL pointer.

Add a NULL check after em_cpu_get() and return 0 if unavailable,

matching the existing fallback behavior in __dtpm_cpu_setup().

[ rjw: Drop an excess empty code line ]

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00168 · 5.7th percentile
Published
2025-08-19T17:03Z
EPSS history
Timeline
  • 19 AUG 17:03Z
    powercap: dtpm_cpu: Fix NULL pointer dereference in get_pd_power_uw()
    cvelistv5