CVE-2026-97904
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: cpufreq: initialize policy rwsem before sysfs publication cpufreq_policy_alloc() initializes policy->rwsem after kobject_init_and_add() has created the policy sysfs directory and its default attributes. A sysfs access can therefore reach a policy callback before the semaphore has been initialized. Initialize policy->rwsem before publishing the policy kobject so sysfs callbacks always see an initialized semaphore.
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedSep 25, 2026
First seenSep 25, 2026
How to fix
Update
- Linux Linuxc9d8435814f2ac533c40fe3f35d94235bc3a9443, 82a54923700da5de83ce2b26c0b43f6b5005c8f1, b14987a0f73777644099f47f01aba3b0f9dc6c27, b22193eea2ce32c39dda5e09f9c2be2f3fd7eb4a, dc11263cb05ed519758fd135fe08d611bad1f241, 27c9b491bf7604e83b50c3bbfa18a30266ff345f, 2cee937f779f69b195b37bbec1e888da9bfe9d58, 3e5d1bf4bd687beb2cb4e32a07af695455925588 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 2fc3384dc75bf7333384c7a16d12c796f61c3f56 ≤ v < c9d8435814f2ac533c40fe3f35d94235bc3a9443, 2fc3384dc75bf7333384c7a16d12c796f61c3f56 ≤ v < 82a54923700da5de83ce2b26c0b43f6b5005c8f1, 2fc3384dc75bf7333384c7a16d12c796f61c3f56 ≤ v < b14987a0f73777644099f47f01aba3b0f9dc6c27, 2fc3384dc75bf7333384c7a16d12c796f61c3f56 ≤ v < b22193eea2ce32c39dda5e09f9c2be2f3fd7eb4a, 2fc3384dc75bf7333384c7a16d12c796f61c3f56 ≤ v < dc11263cb05ed519758fd135fe08d611bad1f241, 2fc3384dc75bf7333384c7a16d12c796f61c3f56 ≤ v < 27c9b491bf7604e83b50c3bbfa18a30266ff345f, 2fc3384dc75bf7333384c7a16d12c796f61c3f56 ≤ v < 2cee937f779f69b195b37bbec1e888da9bfe9d58, 2fc3384dc75bf7333384c7a16d12c796f61c3f56 ≤ v < 3e5d1bf4bd687beb2cb4e32a07af695455925588, 4.2 | c9d8435814f2ac533c40fe3f35d94235bc3a9443, 82a54923700da5de83ce2b26c0b43f6b5005c8f1, b14987a0f73777644099f47f01aba3b0f9dc6c27, b22193eea2ce32c39dda5e09f9c2be2f3fd7eb4a, dc11263cb05ed519758fd135fe08d611bad1f241, 27c9b491bf7604e83b50c3bbfa18a30266ff345f, 2cee937f779f69b195b37bbec1e888da9bfe9d58, 3e5d1bf4bd687beb2cb4e32a07af695455925588 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.