CVE-2026-92492

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference can occur in the amd-pstate driver of the cpufreq subsystem. This happens when the cpufreq cpu get() function returns NULL because no policy is associated with the requested CPU, such as when the CPU is offline or the policy has been torn down. The functions amd pstate power supply notifier() and amd pstate profile set() pass this NULL pointer to amd pstate get balanced epp() and amd pstate set epp(), which dereference it unconditionally. This condition can be triggered by a racing CPU hotplug or driver teardown.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.