CVE-2025-68177

Published: December 19, 2025Last modified: December 19, 2025

Description

In the Linux kernel, the following vulnerability has been resolved: cpufreq/longhaul: handle NULL policy in longhaul_exit longhaul_exit() was calling cpufreq_cpu_get(0) without checking for a NULL policy pointer. On some systems, this could lead to a NULL dereference and a kernel warning or panic. This patch adds a check using unlikely() and returns early if the policy is NULL. Bugzilla: #219962

Status

ProductReleasePackageStatus
Alpaquita Linux23 LTSlinux-ltsFixed (6.1.159-r0)
25 LTSlinux-ltsFixed (6.12.58-r0)
Streamlinux-ltsFixed (6.12.58-r0)

References

ON THIS PAGE