Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-43332

thermal: core: Fix thermal zone device registration error path

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: thermal: core: Fix thermal zone device registration error path If thermal_zone_device_register_with_trips() fails after registering a thermal zone device, it needs to wait for the tz->removal completion like thermal_zone_device_unregister(), in case user space has managed to take a reference to the thermal zone device's kobject, in which case thermal_release() may not be called by the error path itself and tz may be freed prematurely. Add the missing wait_for_completion() call to the thermal zone device registration error path.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 335176dd8ebaca6493807dceea33c478305667fa to < 9e796001af97a1f7368d5114b7a8533dd98d797aaffected
  • 04e6ccfc93c5a1aa1d75a537cf27e418895e20ea to < 604da9c04c218362e1c1457304ebeb9c199d537caffected
  • 04e6ccfc93c5a1aa1d75a537cf27e418895e20ea to < c4c7219e93319bba9ba0765dee597784c78f63c5affected
  • 04e6ccfc93c5a1aa1d75a537cf27e418895e20ea to < 4d390f0e507dfb16d58f83a58d78d1150dc8b9d7affected
  • 04e6ccfc93c5a1aa1d75a537cf27e418895e20ea to < 9e07e3b81807edd356e1f794cffa00a428eff443affected
  • 02871710b93058eb1249d5847c0b2d1c2c3c98aeaffected
  • 6.6.14 to < 6.6.134affected
  • 6.7.2 to < 6.8affected

Linux Linux

Default version status: affected

  • 6.8affected
  • 0 to < 6.8unaffected
  • 6.6.134 to ≤ 6.6.*unaffected
  • 6.12.81 to ≤ 6.12.*unaffected
  • 6.18.22 to ≤ 6.18.*unaffected
  • 6.19.12 to ≤ 6.19.*unaffected
  • 7.0 to ≤ *unaffected

References