Description

In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: Check governor before using governor->name Commit 96ffcdf239de ("PM / devfreq: Remove redundant governor_name from struct devfreq") removes governor_name and uses governor->name to replace it. But devfreq->governor may be NULL and directly using devfreq->governor->name may cause null pointer exception. Move the check of governor to before using governor->name.

INFO

Published Date :

2025-08-19T17:03:52.542Z

Last Modified :

2025-11-03T17:40:22.664Z

Source :

Linux
AFFECTED PRODUCTS

The following products are affected by CVE-2025-38609 vulnerability.

Vendors Products
Debian
  • Debian Linux
Linux
  • Linux Kernel
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-38609.

URL Resource
https://git.kernel.org/stable/c/2731c68f536fddcb71332db7f8d78c5eb4684c04 cve-icon cve-icon
https://git.kernel.org/stable/c/631e101728df2a86b8fb761b49fad9712c651f8a cve-icon cve-icon
https://git.kernel.org/stable/c/75323a49aa603cf5484a6d74d0d329e86d756e11 cve-icon cve-icon
https://git.kernel.org/stable/c/81f50619370045120c133bfdda5b320c8c97d41e cve-icon cve-icon
https://git.kernel.org/stable/c/bab7834c03820eb11269bc48f07c3800192460d2 cve-icon cve-icon
https://git.kernel.org/stable/c/d5632359dbc44862fc1ed04093c1f57529830261 cve-icon cve-icon
https://git.kernel.org/stable/c/f0479e878d4beb45e73c03e574c59f0a23ccd176 cve-icon cve-icon
https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html cve-icon
https://lore.kernel.org/linux-cve-announce/2025081923-CVE-2025-38609-9c6a@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-38609 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-38609 cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact