CVE-2025-38113: ACPI: CPPC: Fix NULL pointer dereference when nosmp is used
In the Linux kernel, the following vulnerability has been resolved:
ACPI: CPPC: Fix NULL pointer dereference when nosmp is used
With nosmp in cmdline, other CPUs are not brought up, leaving their cpcdescptr NULL. CPU0's iteration via foreachpossiblecpu() dereferences these NULL pointers, causing panic.
Panic backtrace:
[ 0.401123] Unable to handle kernel NULL pointer dereference at virtual address 00000000000000b8 ... [ 0.403255] [<ffffffff809a5818>] cppcallowfastswitch+0x6a/0xd4 ... Kernel panic - not syncing: Attempted to kill init!
[ rjw: New subject ]
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38113?
CVE-2025-38113 is classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2025-38113?
To fix CVE-2025-38113, update your Linux kernel to the latest stable version that includes the patch.
What types of systems are affected by CVE-2025-38113?
CVE-2025-38113 affects systems running the Linux kernel with the ACPI CPPC feature and nosmp option configured.
What is the exploit vector for CVE-2025-38113?
CVE-2025-38113 can be exploited through a NULL pointer dereference that occurs during CPU iteration when only CPU0 is active.
Is CVE-2025-38113 a remote exploit?
CVE-2025-38113 is not a remote exploit and requires local access to the affected system to be leveraged.