CVE-2025-23137
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Apr 16, 2025
Updated: Apr 29, 2025
CWE ID 476
Summary
CVE-2025-23137 is a vulnerability discovered in the Linux kernel's cpufreq/amd-pstate component. The issue lies in the function amd_pstate_update, where a NULL pointer check was missing before dereferencing a policy variable. If an attacker successfully exploits this vulnerability, they could cause unintended behavior or crashes in the system, potentially leading to further attacks. This issue has been addressed in recent Linux kernel updates.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Linux Kernel
Affected Vendors
- LINUX