-

CVE-2026-97904

cpufreq: initialize policy rwsem before sysfs publication

In the Linux kernel, the following vulnerability has been resolved:

cpufreq: initialize policy rwsem before sysfs publication

cpufreq_policy_alloc() initializes policy->rwsem after
kobject_init_and_add() has created the policy sysfs directory and its
default attributes. A sysfs access can therefore reach a policy callback
before the semaphore has been initialized.

Initialize policy->rwsem before publishing the policy kobject so sysfs
callbacks always see an initialized semaphore.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 2fc3384dc75bf7333384c7a16d12c796f61c3f56
Version < c9d8435814f2ac533c40fe3f35d94235bc3a9443
Status affected
Version 2fc3384dc75bf7333384c7a16d12c796f61c3f56
Version < 82a54923700da5de83ce2b26c0b43f6b5005c8f1
Status affected
Version 2fc3384dc75bf7333384c7a16d12c796f61c3f56
Version < b14987a0f73777644099f47f01aba3b0f9dc6c27
Status affected
Version 2fc3384dc75bf7333384c7a16d12c796f61c3f56
Version < b22193eea2ce32c39dda5e09f9c2be2f3fd7eb4a
Status affected
Version 2fc3384dc75bf7333384c7a16d12c796f61c3f56
Version < dc11263cb05ed519758fd135fe08d611bad1f241
Status affected
Version 2fc3384dc75bf7333384c7a16d12c796f61c3f56
Version < 27c9b491bf7604e83b50c3bbfa18a30266ff345f
Status affected
Version 2fc3384dc75bf7333384c7a16d12c796f61c3f56
Version < 2cee937f779f69b195b37bbec1e888da9bfe9d58
Status affected
Version 2fc3384dc75bf7333384c7a16d12c796f61c3f56
Version < 3e5d1bf4bd687beb2cb4e32a07af695455925588
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 4.2
Status affected
Version 0
Version < 4.2
Status unaffected
Version <= 5.10.*
Version 5.10.271
Status unaffected
Version <= 5.15.*
Version 5.15.222
Status unaffected
Version <= 6.1.*
Version 6.1.189
Status unaffected
Version <= 6.6.*
Version 6.6.158
Status unaffected
Version <= 6.12.*
Version 6.12.111
Status unaffected
Version <= 6.18.*
Version 6.18.53
Status unaffected
Version <= 7.2.*
Version 7.2.7
Status unaffected
Version <= *
Version 7.3-rc3
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.2% 0.088
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/dc11263cb05ed519758fd135fe08d611bad1f241
https://git.kernel.org/stable/c/27c9b491bf7604e83b50c3bbfa18a30266ff345f
https://git.kernel.org/stable/c/2cee937f779f69b195b37bbec1e888da9bfe9d58
https://git.kernel.org/stable/c/3e5d1bf4bd687beb2cb4e32a07af695455925588
https://git.kernel.org/stable/c/82a54923700da5de83ce2b26c0b43f6b5005c8f1
https://git.kernel.org/stable/c/b14987a0f73777644099f47f01aba3b0f9dc6c27
https://git.kernel.org/stable/c/b22193eea2ce32c39dda5e09f9c2be2f3fd7eb4a
https://git.kernel.org/stable/c/c9d8435814f2ac533c40fe3f35d94235bc3a9443