Wind River Support Network

HomeDefectsLIN1023-12936

Fixed

LIN1023-12936 : Security Advisory - linux - CVE-2025-37841

Created: May 13, 2025 Updated: May 28, 2025

Resolved Date: May 25, 2025

Found In Version: 10.23.30.1

Fix Version: 10.23.30.17

Severity: Standard

Applicable for: Wind River Linux LTS 23

Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:

pm: cpupower: bench: Prevent NULL dereference on malloc failure

If malloc returns NULL due to low memory, 'config' pointer can be NULL.
Add a check to prevent NULL dereference.

CVEs

CVE-2025-37841