Riskcovery

CVE-2023-53997

thermal: of: fix double-free on unregistration

State
Published
Severity
7.8 High
Published
Dec 24, 2025
Updated
Aug 5, 2026
Reserved
Dec 24, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

thermal: of: fix double-free on unregistration

Since commit 3d439b1a2ad3 ("thermal/core: Alloc-copy-free the thermal zone parameters structure"), thermal_zone_device_register() allocates a copy of the tzp argument and frees it when unregistering, so thermal_of_zone_register() now ends up leaking its original tzp and double-freeing the tzp copy. Fix this by locating tzp on stack instead.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 3d439b1a2ad36c8b4ea151c8de25309d60d17407 to before adce49089412a9ae28f5c666e0bb12fbcd86b3f7Affected
  • 3d439b1a2ad36c8b4ea151c8de25309d60d17407 to before ac4436a5b20e0ef1f608a9ef46c08d5d142f8da6Affected
LinuxLinux
  • 6.4Affected
  • before 6.4Not affected
  • 6.4.8 through 6.4.*Not affected
  • 6.5 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.