Not yet scoredPublished Dec 16, 2025

CVE-2025-68177cpufreq/longhaul: handle NULL policy in longhaul_exit

Updated under an hour ago (Oct 27, 2026, 6:20 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: cpufreq/longhaul: handle NULL policy in longhaul_exit longhaul_exit() was calling cpufreq_cpu_get(0) without checking for a NULL policy pointer. On some systems, this could lead to a NULL dereference and a kernel warning or panic. This patch adds a check using unlikely() and returns early if the policy is NULL. Bugzilla: #219962

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from b43a7ffbf33be7e4d3b10b7714ee663ea2c52fe2 before b02352dd2e6cca98777714cc2a27553191df70db; from b43a7ffbf33be7e4d3b10b7714ee663ea2c52fe2 before 956b56d17a89775e4957bbddefa45cd3c6c71000; from b43a7ffbf33be7e4d3b10b7714ee663ea2c52fe2 before 55cf586b9556863e3c2a45460aba71bcb2be5bcd; from b43a7ffbf33be7e4d3b10b7714ee663ea2c52fe2 before fd93e1d71b3b14443092919be12b1abf08de35eb; from b43a7ffbf33be7e4d3b10b7714ee663ea2c52fe2 before 8d6791c480f22d6e9a566eaa77336d3d37c5c591; from b43a7ffbf33be7e4d3b10b7714ee663ea2c52fe2 before 64adabb6d9d51b7e7c02fe733346a2c4dd738488; from b43a7ffbf33be7e4d3b10b7714ee663ea2c52fe2 before 809cf2a7794ca4c14c304b349f4c3ae220701ce4; from b43a7ffbf33be7e4d3b10b7714ee663ea2c52fe2 before 592532a77b736b5153e0c2e4c74aa50af0a352ab	CNA record

References

References

https://git.kernel.org/stable/c/b02352dd2e6cca98777714cc2a27553191df70db
https://git.kernel.org/stable/c/956b56d17a89775e4957bbddefa45cd3c6c71000
https://git.kernel.org/stable/c/55cf586b9556863e3c2a45460aba71bcb2be5bcd
https://git.kernel.org/stable/c/fd93e1d71b3b14443092919be12b1abf08de35eb
https://git.kernel.org/stable/c/8d6791c480f22d6e9a566eaa77336d3d37c5c591
https://git.kernel.org/stable/c/64adabb6d9d51b7e7c02fe733346a2c4dd738488
https://git.kernel.org/stable/c/809cf2a7794ca4c14c304b349f4c3ae220701ce4
https://git.kernel.org/stable/c/592532a77b736b5153e0c2e4c74aa50af0a352ab

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.