CVE-2026-92492

A flaw was found in the Linux kernel's cpufreq/amd-pstate component. A local attacker could potentially trigger a NULL pointer dereference by performing a racing CPU hotplug or driver teardown operation. This occurs because certain functions, amd_pstate_power_supply_notifier() and amd_pstate_profile_set(), do not properly handle cases where a CPU frequency policy is missing, leading to an unconditional dereference of a NULL pointer. This vulnerability could result in a system crash, causing a Denial of Service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.