CVE-2025-38113

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: A NULL pointer dereference issue has been identified in the Linux kernel, specifically in the ACPI CPPC component. This issue occurs when the nosmp parameter is used in the command line, preventing other CPUs from being brought up and leaving their cpc desc ptr as NULL. As a result, CPU0's iteration via for each possible cpu() dereferences these NULL pointers, causing a kernel panic. The panic backtrace indicates that the issue is related to the cppc allow fast switch() function.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.