Database/Control plane, storage & DevOps
Linux cpufreq/amd-pstate - unchecked cpufreq_cpu_get() return value: cpufreq_cpu_get() can return NULL and amd-pstate
CVSS 5.5CVE-2024-50009Control plane, storage & DevOpscurated
Impact
cpufreq_cpu_get() can return NULL and amd-pstate did not check it, giving a kernel NULL dereference and a host panic. Availability failure in always-running platform code.
Who can reach it
Local, on the amd-pstate path.
What to do
Distro kernel update plus reboot.
References
Related entries
- Linux platform/x86/amd/pmc - IRQ1 wakeup disabled unconditionally: The AMD PMC driver disabled IRQ1 wakeup in casesCVE-2025-21645 · Linux platform/x86/amd/pmc - IRQ1 wakeup disabled unconditionallyMedium
- Linux cpufreq/amd-pstate - cpufreq_policy reference counting: amd_pstate_update_limits() takes a cpufreq_policyCVE-2025-21841 · Linux cpufreq/amd-pstate - cpufreq_policy reference countingMedium
- Linux cpufreq/amd-pstate - missing NULL check in amd_pstate_update: amd_pstate_update() dereferences the cpufreq policyCVE-2025-23137 · Linux cpufreq/amd-pstate - missing NULL check in amd_pstate_updateMedium
- Linux x86/CPU/AMD - INVLPGB on Zen 2 (Cyan Skillfish): Using broadcast TLB invalidation (INVLPGB) on affected Zen 2CVE-2025-38518 · Linux x86/CPU/AMD - INVLPGB on Zen 2 (Cyan Skillfish)Medium
- SPDK (Storage Performance Development Kit) 25.05 - NVMe-oF target, lib/nvmf: A buffer overflow in the NVMe-oF targetCVE-2025-57275 · SPDK (Storage Performance Development Kit) 25.05 - NVMe-oF target, lib/nvmfMedium
- HashiCorp go-slug: Unicode normalization mismatch lets excluded files slip past .terraformignore into the uploadCVE-2026-14978 · HashiCorp go-slug (.terraformignore path matching, Unicode normalization)Medium
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.