ZeroDay Findings
Sign inSign up

Vulnerabilities

Vulnerability · CVE-2025-37831

In the Linux kernel, the following vulnerability has been resolved: cpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate() cpufreq_cpu_get_raw() can return NULL whe

Published May 8, 2025 · catalog updated May 11, 2026 · Linux Linux

Severity
None0.0
Known exploitation
Not in CISA/VulnCheck KEV
EPSS
0.2%
Remediation
Version ranges on file
Affected products
vendor Linux Linux 6286bbb40576ffadfde206c332b61345c19af57f <fbdba5f37413dbc09d82ad7235e5b7a2fb8e0f75

In the Linux kernel, the following vulnerability has been resolved: cpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate() cpufreq_cpu_get_raw() can return NULL when the target CPU is not present in the policy->cpus mask. apple_soc_cpufreq_get_rate() does not check for this case, which results in a NULL pointer dereference.

Technical analysis

Mechanism and impact are interpreted from ingested advisories — not independent exploit research.

  • CWE classification

    No CWE identifiers stored yet.

  • Prerequisites and impact

    Follow the original vendor advisory for access prerequisites and impact. This catalog does not invent exploit conditions.

How to fix CVE-2025-37831

What to do

Three reads of the same public record: the decision, the versions on file, and the signals. Confirm the vendor advisory before you patch. This page does not publish exploit steps.

Executive

This is a public record, not a confirmed incident. CVE-2025-37831 is a none issue in Linux Linux (CVSS 0.0). CISA does not currently list it as known exploited. Next step: Compare installed versions with the linked vendor advisory before changing production.

System administrator

Check whether Linux Linux is installed. Ranges on record: Linux Linux 6286bbb40576ffadfde206c332b61345c19af57f <fbdba5f37413dbc09d82ad7235e5b7a2fb8e0f75 (6286bbb40576ffadfde206c332b61345c19af57f <fbdba5f37413dbc09d82ad7235e5b7a2fb8e0f75). Compare installed versions with the linked vendor advisory before changing production.

Security analyst

CVSS 0.0. EPSS 0.2%. CISA does not currently list it as known exploited. Weaknesses: not classified. Sources: cve_org, epss, euvd. Exploit links, when listed below, point at the original publisher.

Related intelligence

  • Exploitation evidence

    Not listed as known exploited in CISA KEV. Not in CISA KEV or VulnCheck KEV.

  • Safe detection guidance

    Compare installed versions with the affected ranges below and verify the advisory from the original publisher. This site stores metadata and outbound links only; it does not ship exploit code or proof-of-concept payloads.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. May 8, 2025 · EUVD

    Detected

    In the Linux kernel, the following vulnerability has been resolved: cpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate() cpufreq_cpu_get_raw() can return NULL when the target CPU is not present in the policy->cpus mask. apple_soc_cpufreq_get_rate() does not check for this case, which results in a NULL pointer dereference.

  2. May 11, 2026 · EUVD

    Updated

    In the Linux kernel, the following vulnerability has been resolved: cpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate() cpufreq_cpu_get_raw() can return NULL when the target CPU is not present in the policy->cpus mask. apple_soc_cpufreq_get_rate() does not check for this case, which results in a NULL pointer dereference.

Affected versions

Enter an installed version to get a verified affected / not-affected result against the ranges below.

  • vendor Linux Linux 6286bbb40576ffadfde206c332b61345c19af57f <fbdba5f37413dbc09d82ad7235e5b7a2fb8e0f756286bbb40576ffadfde206c332b61345c19af57f <fbdba5f37413dbc09d82ad7235e5b7a2fb8e0f75

Sources

  • CVE.orgVulnerability recordCVE-2025-37831

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2025-37831

    30-day exploitation probability 0.2%

    first.org
  • EUVDVulnerability recordEUVD-2025-13957

    In the Linux kernel, the following vulnerability has been resolved: cpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate() cpufreq_cpu_get_raw() can return NULL when the target CPU is not present in the policy->cpus mask. apple_soc_cpufreq_get_rate() does not chec

    euvd.enisa.europa.eu

References

Freshness

Last verified in this catalog Oct 18, 2026. Significant claims (KEV, EPSS, CVSS, affected ranges) come from the source rows above — open the original publisher for the authoritative advisory.