LIN1024-9253 : Security Advisory - linux - CVE-2025-37841
Created: May 13, 2025
Updated: Jun 8, 2025
Resolved Date: Jun 5, 2025
Found In Version: 10.24.33.1
Fix Version: 10.24.33.10
Severity: Standard
Applicable for: Wind River Linux LTS 24
Component/s: Kernel
Description
In the Linux kernel, the following vulnerability has been resolved:
pm: cpupower: bench: Prevent NULL dereference on malloc failure
If malloc returns NULL due to low memory, 'config' pointer can be NULL.
Add a check to prevent NULL dereference.