Riskcovery

CVE-2024-36956

thermal/debugfs: Free all thermal zone debug memory on zone removal

State
Published
Severity
Not scored
Published
May 30, 2024
Updated
May 11, 2026
Reserved
May 30, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

thermal/debugfs: Free all thermal zone debug memory on zone removal

Because thermal_debug_tz_remove() does not free all memory allocated for thermal zone diagnostics, some of that memory becomes unreachable after freeing the thermal zone's struct thermal_debugfs object.

Address this by making thermal_debug_tz_remove() free all of the memory in question.

Cc :6.8+ <stable@vger.kernel.org> # 6.8+

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 7ef01f228c9f54c6260319858be138a8a7e9e704 to before f51564e4b3992b53df79460ed5781a5330b5b1d5Affected
  • 7ef01f228c9f54c6260319858be138a8a7e9e704 to before 72c1afffa4c645fe0e0f1c03e5f34395ed65b5f4Affected
LinuxLinux
  • 6.8Affected
  • before 6.8Not affected
  • 6.8.10 through 6.8.*Not affected
  • 6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.