CVE-2025-23137

Aliases:UBUNTU-CVE-2025-23137DEBIAN-CVE-2025-23137CGA-2557-pf8c-fmxmCGA-2685-jrrv-j9g9CGA-2738-7mvp-hhgwCGA-2g8x-hm9p-pq8gCGA-2gp8-76jw-3hq7CGA-2hv7-rhr5-5mw5CGA-2j76-q8cg-xwfhCGA-2jv2-cq8v-vv2vCGA-2mx2-6gfx-vjr8CGA-2qw3-mqwm-9hjqCGA-2wvv-jpxq-j7q3CGA-33gp-97cj-gjc8CGA-398h-3f4f-vc38CGA-3rw5-h89v-vmh7CGA-3w7h-3422-r48fCGA-3xqm-mpfg-w5mfCGA-42gw-wmcv-3hvxCGA-446j-6mgf-2j9wCGA-47gh-96cm-h65gCGA-47vp-q7v5-g6q3CGA-4c5h-3h4x-xm6gCGA-4cwp-gg87-662hCGA-4hx7-jc4g-p426CGA-4xx9-r94w-g24qCGA-532q-jc49-c43fCGA-539g-52xf-g34jCGA-53r7-j8xc-6c3rCGA-59vm-6j55-h8hwCGA-5c5w-cxm7-9gqqCGA-5jhg-hrj3-gpfjCGA-5pcj-cgh4-ph9fCGA-5qwp-w558-95h7CGA-5rj5-jqqp-qgm7CGA-5v57-5ff6-mhvfCGA-5wc4-vp5f-7ffjCGA-5wr2-vp9w-mv4xCGA-6465-54vf-r2hmCGA-6g75-xxw4-cgq7CGA-6mqm-x44x-jm85CGA-74xq-hxw9-qmg8CGA-79hw-8772-v3r6CGA-7p74-qwm6-rc85CGA-7r9h-r4h9-w8q5CGA-855j-wq69-7xxvCGA-88xh-7jf6-gv43CGA-8crp-xm5c-gf43CGA-8fj9-h6pp-jfw7CGA-8x69-ppm8-mpfpCGA-939g-99v3-97crCGA-9444-whrq-5qh4CGA-97gp-w9f2-gmghCGA-9cwj-m55q-428hCGA-9g2x-rpq3-9phxCGA-9gv4-v489-p82mCGA-9h8w-237j-4fw2CGA-9vrm-742h-8g7pCGA-9x9f-2g62-9g4mCGA-c7q9-c3wp-q3cqCGA-chqf-vh7r-82jvCGA-cmvp-99x7-m27xCGA-cqqx-m9px-wf6pCGA-cvqp-4g9f-v9gmCGA-f2hr-3gjv-j3rpCGA-f35v-pc8w-3qc7CGA-f9c6-85m9-m3xcCGA-ffhh-xffc-2849CGA-fhwc-55pq-6vvjCGA-fmjh-r384-pwc3CGA-g3v5-92gx-f6jwCGA-g465-576r-qhvhCGA-g4m5-qvxr-4pp9CGA-g847-6626-c6r8CGA-g9w5-2r5g-7g82CGA-gh34-957v-7h9qCGA-gjw6-3jqg-xfpmCGA-gqxx-7859-44pjCGA-gwx8-252r-fc67CGA-h4hj-42jh-v4x5CGA-h5m7-pm2q-fhjjCGA-hjj2-qph8-x4fqCGA-j2f2-2m3q-rv6qCGA-j2qc-4vfr-fhcxCGA-j4xr-rwqm-q9xfCGA-j82g-mvv3-7r44CGA-jc5m-g25j-f732CGA-jfgg-jmrc-wmcwCGA-jqj5-9vpg-9cjhCGA-m2qh-9jjv-fwm5CGA-m3m2-4545-c8rfCGA-m4rv-xr2p-4xhfCGA-m92v-933m-3456CGA-mcfv-8mfr-f5qjCGA-mhhf-ccrw-8x24CGA-mj49-v8xr-2m28CGA-mqmp-jcr3-35rvCGA-mrwf-vjm9-mgwfCGA-mwwg-jxf9-pvhcCGA-mx42-6hh8-97wqCGA-p6q5-q6rc-2vgjCGA-p8w8-68xq-pvp9CGA-pc76-7hvm-qc85CGA-pccv-3q23-9292CGA-pfc6-xrwm-fg43CGA-pq59-jcmp-6pm7CGA-pw2p-fc56-4ff2CGA-q2q5-gc38-fv57CGA-q9hx-74pp-fvh9CGA-q9xw-f7w6-4f9qCGA-qfmx-m2r5-6vx2CGA-qh23-r8qg-mhj7CGA-qhwp-8x27-gcgmCGA-qpgj-jmjx-v8fjCGA-qqp5-j7hf-jjf5CGA-qqr5-vm73-gr6xCGA-qrc8-8vch-592qCGA-qv67-hgcq-hfcvCGA-qv7m-4gh2-2pmwCGA-qw86-q5qx-xwcmCGA-qxcm-2hx4-7653CGA-rcxr-fj7w-2wqcCGA-rf4p-4vf4-w47hCGA-rhrf-29c5-xrm8CGA-rmf6-grp5-99g9CGA-rmrh-rqx2-fj92CGA-rq62-hjfp-4xp6CGA-rqr6-hr27-734hCGA-rv44-9pvv-gwxgCGA-rvpf-m32m-jc43CGA-v7vq-vwpr-5h8xCGA-vjg3-27gj-wh37CGA-vmpc-3x36-g7rgCGA-vpj2-qhm3-677hCGA-vr69-4jjp-3f55CGA-vx9g-r5m3-5qg6CGA-w5wv-xm3x-gh59CGA-w8mf-26x3-q9wwCGA-w956-x8fg-8rmgCGA-wmv9-g8jp-cvcvCGA-wx49-2vrp-v5mmCGA-x57g-r2v5-hg7jCGA-x6fw-fgc4-c5xqCGA-xcm5-6jvg-rfg3CGA-xgq5-jhg7-fx73CGA-xr3v-39qq-vcmv

Advisory lineage Upstream: 0 Downstream: 7

Downstream

DEBIAN-CVE-2025-23137 SUSE-SU-2026:4120-1 SUSE-SU-2026:4254-1 UBUNTU-CVE-2025-23137 USN-7594-1 USN-7594-2

Modified

Published: 16 Apr 2025, 14:13

Last modified:11 May 2026, 21:13

Vulnerability Summary

Overall Risk (default)

low

22/100

CVSS Score

5.5 MEDIUM

v3.1 (nvd)

EPSS Score

0.19% LOW

0% probability +0.16%

KEV

Not listed

Ransomware

No reports

Public exploits

None found

Dark Web

Not detected

Timeline

16 Apr 2025, 14:13

Published

Vulnerability first disclosed

11 May 2026, 21:13

Last Modified

Vulnerability information updated

Description

In the Linux kernel, the following vulnerability has been resolved: cpufreq/amd-pstate: Add missing NULL ptr check in amd_pstate_update Check if policy is NULL before dereferencing it in amd_pstate_update.

CVSS Metrics

v3.1•MEDIUM•Score: 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS Trends

Current EPSS score: 0.19%• Percentile: 9%

Techniques & Countermeasures

CWE-476•NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.

Affected Systems

chainguard•hyperv-daemons-6.12
< 6.12.51-r0
chainguard•linux-aws-6.12
< 6.12.68-r1 | < 6.12.71-r0 | < 6.12.63-r0 | < 6.12.67-r0 | < 6.12.76-r0 | < 6.12.68-r0 | < 6.12.70-r0 | < 6.12.66-r0 | < 6.12.74-r1 | < 6.12.60-r4 | < 6.12.62-r1 | < 6.12.65-r1 | < 6.12.65-r0 | < 6.12.65-r2 | < 6.12.74-r0 | < 6.12.72-r1 | < 6.12.78-r0 | < 6.12.77-r0 | < 6.12.72-r0 | < 6.12.62-r2 | < 6.12.77-r2 | < 6.12.57-r2 | < 6.12.77-r1 | < 6.12.69-r0 | < 6.12.80-r0 | < 6.12.62-r0 | < 6.12.49-r0
chainguard•linux-aws-6.12-boot-installed
< 6.12.49-r0
chainguard•linux-aws-6.12-fips-boot-installed
< 6.12.49-r0
chainguard•linux-aws-6.12-modules
< 6.12.49-r0
chainguard•linux-azure-6.12
< 6.12.71-r0 | < 6.12.78-r0 | < 6.12.67-r0 | < 6.12.63-r0 | < 6.12.69-r0 | < 6.12.70-r0 | < 6.12.57-r2 | < 6.12.65-r2 | < 6.12.66-r0 | < 6.12.77-r0 | < 6.12.77-r2 | < 6.12.65-r3 | < 6.12.62-r2 | < 6.12.76-r0 | < 6.12.72-r0 | < 6.12.60-r4 | < 6.12.77-r1 | < 6.12.62-r0 | < 6.12.65-r1 | < 6.12.74-r1 | < 6.12.62-r1 | < 6.12.74-r0 | < 6.12.65-r4 | < 6.12.68-r0 | < 6.12.80-r0 | < 6.12.51-r0 | < 6.12.60-r3
chainguard•linux-azure-6.12-boot-installed
< 6.12.51-r0
chainguard•linux-azure-6.12-fips-boot-installed
< 6.12.51-r0
chainguard•linux-azure-6.12-modules
< 6.12.51-r0
chainguard•linux-gcp-6.12
< 6.12.78-r0 | < 6.12.68-r0 | < 6.12.60-r4 | < 6.12.62-r0 | < 6.12.63-r0 | < 6.12.76-r0 | < 6.12.68-r1 | < 6.12.77-r1 | < 6.12.70-r0 | < 6.12.69-r0 | < 6.12.62-r1 | < 6.12.67-r0 | < 6.12.77-r2 | < 6.12.65-r2 | < 6.12.77-r0 | < 6.12.57-r2 | < 6.12.60-r3 | < 6.12.74-r1 | < 6.12.65-r0 | < 6.12.66-r0 | < 6.12.51-r0 | < 6.12.72-r0 | < 6.12.62-r2 | < 6.12.65-r1 | < 6.12.80-r0 | < 6.12.74-r0 | < 6.12.71-r0
chainguard•linux-gcp-6.12-boot-installed
< 6.12.51-r0
chainguard•linux-gcp-6.12-fips-boot-installed
< 6.12.51-r0
chainguard•linux-gcp-6.12-modules
< 6.12.51-r0
chainguard•linux-qemu-6.12
< 6.12.78-r0 | < 6.12.74-r0 | < 6.12.69-r0 | < 6.12.72-r0 | < 6.12.68-r0 | < 6.12.77-r1 | < 6.12.70-r0 | < 6.12.76-r0 | < 6.12.77-r0 | < 6.12.77-r2 | < 6.12.66-r0 | < 6.12.65-r1 | < 6.12.74-r1 | < 6.12.80-r0 | < 6.12.67-r0 | < 6.12.71-r0 | < 6.12.65-r2
chainguard•linux-vmware-6.12
< 6.12.67-r0 | < 6.12.65-r2 | < 6.12.70-r0 | < 6.12.74-r1 | < 6.12.71-r0 | < 6.12.65-r1 | < 6.12.66-r0 | < 6.12.69-r0 | < 6.12.77-r0 | < 6.12.77-r1 | < 6.12.68-r1 | < 6.12.74-r0 | < 6.12.72-r0 | < 6.12.68-r0 | < 6.12.80-r0 | < 6.12.76-r0 | < 6.12.77-r2 | < 6.12.78-r0
debian•linux
< 6.12.35-1 | < 6.12.35-1
ubuntu•linux-allwinner-5.19
all
ubuntu•linux-aws-5.0
all
ubuntu•linux-aws-5.11
all
ubuntu•linux-aws-5.13
all
ubuntu•linux-aws-5.19
all
ubuntu•linux-aws-5.3
all
ubuntu•linux-aws-5.8
all
ubuntu•linux-aws-6.2
all
ubuntu•linux-aws-6.5
all
ubuntu•linux-azure
all
ubuntu•linux-azure-5.11
all
ubuntu•linux-azure-5.13
all
ubuntu•linux-azure-5.19
all
ubuntu•linux-azure-5.3
all
ubuntu•linux-azure-5.8
all
ubuntu•linux-azure-6.11
all
ubuntu•linux-azure-6.2
all
ubuntu•linux-azure-6.5
all
ubuntu•linux-azure-edge
all
ubuntu•linux-azure-fde
all | all
ubuntu•linux-azure-fde-5.19
all
ubuntu•linux-azure-fde-6.2
all
ubuntu•linux-bluefield
all
ubuntu•linux-gcp
all
ubuntu•linux-gcp-5.11
all
ubuntu•linux-gcp-5.13
all
ubuntu•linux-gcp-5.19
all
ubuntu•linux-gcp-5.3
all
ubuntu•linux-gcp-5.8
all
ubuntu•linux-gcp-6.11
all
ubuntu•linux-gcp-6.2
all
ubuntu•linux-gcp-6.5
all
ubuntu•linux-gke
all
ubuntu•linux-gke-4.15
all

Showing first 50 affected entries in server-rendered view.