All vulnerabilities
CVE-2026-97904

Linux: cpufreq: initialize policy rwsem before sysfs publication

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.21%Chance of exploitation activity in the next 30 days, higher than 10% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in82a54923700da5de83ce2b26c0b43f6b5005c8f1Also 27c9b491bf7604e83b50c3bbfa18a30266ff345f, 2cee937f779f69b195b37bbec1e888da9bfe9d58 and 1 moreCVE List
Published25 Sep 2026Updated 19 Oct 2026CVE List

What fixes it

  • 82a54923700da5de83ce2b26c0b43f6b5005c8f1LinuxCVE List
  • 27c9b491bf7604e83b50c3bbfa18a30266ff345fLinuxCVE List
  • 2cee937f779f69b195b37bbec1e888da9bfe9d58LinuxCVE List
  • 3e5d1bf4bd687beb2cb4e32a07af695455925588LinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

cpufreq: initialize policy rwsem before sysfs publication

cpufreq_policy_alloc() initializes policy->rwsem after kobject_init_and_add() has created the policy sysfs directory and its default attributes. A sysfs access can therefore reach a policy callback before the semaphore has been initialized.

Initialize policy->rwsem before publishing the policy kobject so sysfs callbacks always see an initialized semaphore.

Text from CVE List

Affected versions 18

  • Linuxaffected: 2fc3384dc75bf7333384c7a16d12c796f61c3f56 before c9d8435814f2ac533c40fe3f35d94235bc3a9443CVE List
  • Linuxaffected: 2fc3384dc75bf7333384c7a16d12c796f61c3f56 before 82a54923700da5de83ce2b26c0b43f6b5005c8f1CVE List
  • Linuxaffected: 2fc3384dc75bf7333384c7a16d12c796f61c3f56 before b14987a0f73777644099f47f01aba3b0f9dc6c27CVE List
  • Linuxaffected: 2fc3384dc75bf7333384c7a16d12c796f61c3f56 before b22193eea2ce32c39dda5e09f9c2be2f3fd7eb4aCVE List
  • Linuxaffected: 2fc3384dc75bf7333384c7a16d12c796f61c3f56 before dc11263cb05ed519758fd135fe08d611bad1f241CVE List
  • Linuxaffected: 2fc3384dc75bf7333384c7a16d12c796f61c3f56 before 27c9b491bf7604e83b50c3bbfa18a30266ff345fCVE List
  • Linuxaffected: 2fc3384dc75bf7333384c7a16d12c796f61c3f56 before 2cee937f779f69b195b37bbec1e888da9bfe9d58CVE List
  • Linuxaffected: 2fc3384dc75bf7333384c7a16d12c796f61c3f56 before 3e5d1bf4bd687beb2cb4e32a07af695455925588CVE List
  • Linuxaffected: 4.2CVE List
  • Linuxunaffected: all versions before 4.2CVE List
  • Linuxunaffected: 5.10.271 through 5.10.*CVE List
  • Linuxunaffected: 5.15.222 through 5.15.*CVE List
  • Linuxunaffected: 6.1.189 through 6.1.*CVE List
  • Linuxunaffected: 6.6.158 through 6.6.*CVE List
  • Linuxunaffected: 6.12.111 through 6.12.*CVE List
  • Linuxunaffected: 6.18.53 through 6.18.*CVE List
  • Linuxunaffected: 7.2.7 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 8