Database/Control plane, storage & DevOps
Linux cpufreq/amd-pstate - missing NULL check in amd_pstate_update: amd_pstate_update() dereferences the cpufreq policy
CVE-2025-23137Control plane, storage & DevOpscurated
Impact
amd_pstate_update() dereferences the cpufreq policy without checking it for NULL, panicking the host. The CPU frequency driver runs constantly on every AMD node, so a NULL dereference here takes the machine down and every GPU job on it with no warning and no attacker involvement.
Who can reach it
Local, on the amd-pstate update path. Reachable through normal frequency-governor activity.
What to do
Distro kernel update plus reboot; no firmware step.
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.