01 Record

CVE-2026-97904

cpufreq: initialize policy rwsem before sysfs publication

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

cpufreq: initialize policy rwsem before sysfs publication

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.21% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 11.9% of scored records. A rank, not a probability.
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Received. NVD last modified this record on 2026-10-19.
Red Hat severity: Low. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-09-25 10:22Z1 MO AGO

Last updated

2026-10-19 09:10Z10 DAYS AGO

Reserved

2026-09-25

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-908Use of Uninitialized ResourceBase

Data version

5.2

Document digest

1577a7b94be12d0e6d43bc5091ad277da2e4b260ba9eceb715999c301369a35b

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux2fc3384dc75bf7333384c7a16d12c796f61c3f56 to < c9d8435814f2ac533c40fe3f35d94235bc3a9443, 2fc3384dc75bf7333384c7a16d12c796f61c3f56 to < 82a54923700da5de83ce2b26c0b43f6b5005c8f1, 2fc3384dc75bf7333384c7a16d12c796f61c3f56 to < b14987a0f73777644099f47f01aba3b0f9dc6c27, 2fc3384dc75bf7333384c7a16d12c796f61c3f56 to < b22193eea2ce32c39dda5e09f9c2be2f3fd7eb4a, 2fc3384dc75bf7333384c7a16d12c796f61c3f56 to < dc11263cb05ed519758fd135fe08d611bad1f241, 2fc3384dc75bf7333384c7a16d12c796f61c3f56 to < 27c9b491bf7604e83b50c3bbfa18a30266ff345f, 2fc3384dc75bf7333384c7a16d12c796f61c3f56 to < 2cee937f779f69b195b37bbec1e888da9bfe9d58, 2fc3384dc75bf7333384c7a16d12c796f61c3f56 to < 3e5d1bf4bd687beb2cb4e32a07af695455925588, 4.2—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/c9d8435814f2ac533c40fe3f35d94235bc3a9443
git.kernel.orghttps://git.kernel.org/stable/c/82a54923700da5de83ce2b26c0b43f6b5005c8f1
git.kernel.orghttps://git.kernel.org/stable/c/b14987a0f73777644099f47f01aba3b0f9dc6c27
git.kernel.orghttps://git.kernel.org/stable/c/b22193eea2ce32c39dda5e09f9c2be2f3fd7eb4a
git.kernel.orghttps://git.kernel.org/stable/c/dc11263cb05ed519758fd135fe08d611bad1f241
git.kernel.orghttps://git.kernel.org/stable/c/27c9b491bf7604e83b50c3bbfa18a30266ff345f
git.kernel.orghttps://git.kernel.org/stable/c/2cee937f779f69b195b37bbec1e888da9bfe9d58
git.kernel.orghttps://git.kernel.org/stable/c/3e5d1bf4bd687beb2cb4e32a07af695455925588

07 Fixed in

Debian 12

linux
Fixed in 6.1.190-1
linux-6.12
Fixed in 6.12.111-1~deb12u1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.111-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 7.2.7-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.