CVE-2025-38610

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The get pd power uw() function may experience a NULL pointer dereference when em cpu get() returns NULL. This can occur when a CPU becomes unavailable during runtime, leading to a crash when em span cpus() attempts to dereference the NULL pointer. A NULL check has been added after em cpu get() to return 0 if unavailable, aligning with the existing fallback behavior in dtpm cpu setup().

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.