7.8
/ 10
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
In the Linux kernel, the following vulnerability has been resolved:
thermal: core: Fix thermal zone device registration error path
If thermal_zone_device_register_with_trips() fails after registering
a thermal zone device, it needs to wait for the tz->removal completion
like thermal_zone_device_unregister(), in case user space has managed
to take a reference to the thermal zone device's kobject, in which case
thermal_release() may not be called by the error path itself and tz may
be freed prematurely.
Add the missing wait_for_completion() call to the thermal zone device
registration error path.
thermal: core: Fix thermal zone device registration error path
If thermal_zone_device_register_with_trips() fails after registering
a thermal zone device, it needs to wait for the tz->removal completion
like thermal_zone_device_unregister(), in case user space has managed
to take a reference to the thermal zone device's kobject, in which case
thermal_release() may not be called by the error path itself and tz may
be freed prematurely.
Add the missing wait_for_completion() call to the thermal zone device
registration error path.
Basic Information
ID
CVE-2026-43332
Source
Linux
Published
May 8, 2026 at 13:31
Modified
May 11, 2026 at 06:33
Affected Product
Vendor
Linux
Product
Linux
Version
335176dd8ebaca6493807dceea33c478305667fa
Affected Versions
Linux Linux 335176dd8ebaca6493807dceea33c478305667fa
Linux Linux 04e6ccfc93c5a1aa1d75a537cf27e418895e20ea
Linux Linux 04e6ccfc93c5a1aa1d75a537cf27e418895e20ea
Linux Linux 04e6ccfc93c5a1aa1d75a537cf27e418895e20ea
Linux Linux 04e6ccfc93c5a1aa1d75a537cf27e418895e20ea
Linux Linux 02871710b93058eb1249d5847c0b2d1c2c3c98ae
Linux Linux 6.8
Linux Linux 04e6ccfc93c5a1aa1d75a537cf27e418895e20ea
Linux Linux 04e6ccfc93c5a1aa1d75a537cf27e418895e20ea
Linux Linux 04e6ccfc93c5a1aa1d75a537cf27e418895e20ea
Linux Linux 04e6ccfc93c5a1aa1d75a537cf27e418895e20ea
Linux Linux 02871710b93058eb1249d5847c0b2d1c2c3c98ae
Linux Linux 6.8
References
- git.kernel.org /stable/c/9e796001af97a1f7368d5114b7a8533dd98d797a
- git.kernel.org /stable/c/604da9c04c218362e1c1457304ebeb9c199d537c
- git.kernel.org /stable/c/c4c7219e93319bba9ba0765dee597784c78f63c5
- git.kernel.org /stable/c/4d390f0e507dfb16d58f83a58d78d1150dc8b9d7
- git.kernel.org /stable/c/9e07e3b81807edd356e1f794cffa00a428eff443