CVE-2026-97905

The Linux kernel contains a vulnerability in the cpufreq component where policy->cpus is allocated without being zero-initialized when CONFIG_CPUMASK_OFFSTACK=y is enabled. Because alloc_cpumask_var() does not guarantee zeroing, the bitmap may contain garbage data from the slab allocator. This...

EUVD-2026-86759

In the Linux kernel, the following vulnerability has been resolved: cpufreq: zero-initialize policy cpumask before sysfs publication cpufreqpolicyalloc allocates policy-cpus with alloccpumaskvar, i.e. without GFPZERO, unlike the sibling relatedcpus and realcpus masks. With CONFIGCPUMASKOFFSTACK=y...

CVE-2022-50473: Use of Uninitialized Resource

In the Linux kernel, the following vulnerability has been resolved: cpufreq: Init completion before kobjectinitandadd In cpufreqpolicyalloc, it will call uninitialed completion in cpufreqsysfsrelease when kobjectinitandadd fails. And that will cause a crash such as the following page fault in...