CVE-2025-37841 pm: cpupower: bench: Prevent NULL dereference on malloc failure

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CVE-2024-45028 and CVE-2025-37841 Address NULL Dereference Issues CVE-2024-45028, published on September 11, 2024, addresses a NULL dereference issue in mmc_test during allocation failures. CVE-2025-37841, published on May 9, 2025, resolves a similar NULL dereference vulnerability in cpupower's bench component related to malloc failures. Both vulnerabilities could impact system stability and security. 2 sources 41