Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-97904

cpufreq: initialize policy rwsem before sysfs publication

Description

In the Linux kernel, the following vulnerability has been resolved: cpufreq: initialize policy rwsem before sysfs publication cpufreq_policy_alloc() initializes policy->rwsem after kobject_init_and_add() has created the policy sysfs directory and its default attributes. A sysfs access can therefore reach a policy callback before the semaphore has been initialized. Initialize policy->rwsem before publishing the policy kobject so sysfs callbacks always see an initialized semaphore.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 2fc3384dc75bf7333384c7a16d12c796f61c3f56 to < c9d8435814f2ac533c40fe3f35d94235bc3a9443affected
  • 2fc3384dc75bf7333384c7a16d12c796f61c3f56 to < 82a54923700da5de83ce2b26c0b43f6b5005c8f1affected
  • 2fc3384dc75bf7333384c7a16d12c796f61c3f56 to < b14987a0f73777644099f47f01aba3b0f9dc6c27affected
  • 2fc3384dc75bf7333384c7a16d12c796f61c3f56 to < b22193eea2ce32c39dda5e09f9c2be2f3fd7eb4aaffected
  • 2fc3384dc75bf7333384c7a16d12c796f61c3f56 to < dc11263cb05ed519758fd135fe08d611bad1f241affected
  • 2fc3384dc75bf7333384c7a16d12c796f61c3f56 to < 27c9b491bf7604e83b50c3bbfa18a30266ff345faffected
  • 2fc3384dc75bf7333384c7a16d12c796f61c3f56 to < 2cee937f779f69b195b37bbec1e888da9bfe9d58affected
  • 2fc3384dc75bf7333384c7a16d12c796f61c3f56 to < 3e5d1bf4bd687beb2cb4e32a07af695455925588affected

Linux Linux

Default version status: affected

  • 4.2affected
  • 0 to < 4.2unaffected
  • 5.10.271 to ≤ 5.10.*unaffected
  • 5.15.222 to ≤ 5.15.*unaffected
  • 6.1.189 to ≤ 6.1.*unaffected
  • 6.6.158 to ≤ 6.6.*unaffected
  • 6.12.111 to ≤ 6.12.*unaffected
  • 6.18.53 to ≤ 6.18.*unaffected
  • 7.2.7 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References