CVE-2025-21841

cpufreq/amd-pstate: Fix cpufreq_policy ref counting

EPSS 0.2%

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

07 Mar 2025Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

In the Linux kernel, the following vulnerability has been resolved: cpufreq/amd-pstate: Fix cpufreq_policy ref counting amd_pstate_update_limits() takes a cpufreq_policy reference but doesn't decrement the refcount in one of the exit paths, fix that.

Affected products

Linux · Linux

References

https://git.kernel.org/stable/c/28e4c515cf644c621800bd97841757fd49891ba4 https://git.kernel.org/stable/c/3ace20038e19f23fe73259513f1f08d4bf1a3c83 https://git.kernel.org/stable/c/56e6976793c0fcf1638aa534242408ab4e4ca705