Medium 4.7Published Jul 25, 2026

CVE-2026-64373cpufreq: Fix hotplug-suspend race during reboot

Updated under an hour ago (Oct 27, 2026, 10:10 PM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: cpufreq: Fix hotplug-suspend race during reboot During system reboot, cpufreq_suspend() is called via the kernel_restart() -> device_shutdown() path. Unlike the normal system suspend path, the reboot path does not call freeze_processes(), so userspace processes and kernel threads remain active. This allows CPU hotplug operations to run concurrently with cpufreq_suspend(). The original code has no synchronization with CPU hotplug, leading to a race condition where governor_data can be freed by the hotplug path while cpufreq_suspend() is still accessing it, resulting in a null pointer dereference: Unable to handle kernel NULL pointer dereference Call Trace: do_kernel_fault+0x28/0x3c cpufreq_suspend+0xdc/0x160 device_shutdown+0x18/0x200 kernel_restart+0x40/0x80 arm64_sys_reboot+0x1b0/0x200 Fix this by adding cpus_read_lock()/cpus_read_unlock() to cpufreq_suspend() to block CPU hotplug operations while suspend is in progress. [ rjw: Changelog edits ]

CVSS: 4.7 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: Aug 17, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	65650b35133ff20f0c9ef0abd5c3c66dbce3ae57 builds before 6d5dd354c37abaf4d60400c55c71f23ba2b33639; from 65650b35133ff20f0c9ef0abd5c3c66dbce3ae57 before 9103078c7b3091a2fbb52af176f95982ee7dd7f8; from 65650b35133ff20f0c9ef0abd5c3c66dbce3ae57 before cd4524ff6567fa4458a5bec4b017105e671d393e; from 65650b35133ff20f0c9ef0abd5c3c66dbce3ae57 before 73255d702c7560185fd5951aadcf7eb057c2f453; from 65650b35133ff20f0c9ef0abd5c3c66dbce3ae57 before a0ef2fc89d28ca62923376c4b8ffaa57136a36be; 65650b35133ff20f0c9ef0abd5c3c66dbce3ae57 builds before 6e175c00c62dca3d91b987015808b5d52e8db2b4; from 65650b35133ff20f0c9ef0abd5c3c66dbce3ae57 before a0106b41f9a724868d390b8b3b4ea5ca0e04ea53; from 65650b35133ff20f0c9ef0abd5c3c66dbce3ae57 before a9029dd55696c651ee46912afa2a166fa456bb3e; and 10 more ranges	CNA record
linux linux_kernel linux:linux_kernel	from 4.4.198 before 4.5; from 4.9.198 before 4.10; from 4.14.151 before 4.15; from 4.19.81 before 4.20; from 5.3.8 before 5.4; from 5.4.1 before 5.10.261; from 5.11 before 5.15.212; from 5.16 before 6.1.178; and 10 more ranges	NVD

References

References

https://git.kernel.org/stable/c/6d5dd354c37abaf4d60400c55c71f23ba2b33639	patch
https://git.kernel.org/stable/c/9103078c7b3091a2fbb52af176f95982ee7dd7f8	patch
https://git.kernel.org/stable/c/cd4524ff6567fa4458a5bec4b017105e671d393e	patch
https://git.kernel.org/stable/c/73255d702c7560185fd5951aadcf7eb057c2f453	patch
https://git.kernel.org/stable/c/a0ef2fc89d28ca62923376c4b8ffaa57136a36be	patch
https://git.kernel.org/stable/c/6e175c00c62dca3d91b987015808b5d52e8db2b4	patch
https://git.kernel.org/stable/c/a0106b41f9a724868d390b8b3b4ea5ca0e04ea53	patch
https://git.kernel.org/stable/c/a9029dd55696c651ee46912afa2a166fa456bb3e	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.