Riskcovery

CVE-2026-45925

thermal/of: Fix reference leak in thermal_of_cm_lookup()

State
Published
Severity
Not scored
Published
May 27, 2026
Updated
May 27, 2026
Reserved
May 13, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

thermal/of: Fix reference leak in thermal_of_cm_lookup()

In thermal_of_cm_lookup(), tr_np is obtained via of_parse_phandle(), but never released.

Use the __free(device_node) cleanup attribute to automatically release the node and fix the leak.

[ rjw: Changelog edits ]

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • e11df3bffde16fd3b6843aadfb921b5be0f8b55a to before 8af710156c53cdb392d529497ef2b3a10a1f9370Affected
  • 423de5b5bc5b267586b449abd1c4fde562aa0cf9 to before 8344d5da9df74fdbef676214d0c482fc822a01caAffected
  • 423de5b5bc5b267586b449abd1c4fde562aa0cf9 to before 025796ccd7f9f2e013e12319de26b6c021a80c1fAffected
  • 423de5b5bc5b267586b449abd1c4fde562aa0cf9 to before a1fe789a96fe47733c133134fd264cb7ca832395Affected
  • a1e9e19a70eed67a69ca697368739ea1a3ba5780Affected
  • 6.12.18 to before 6.12.75Affected
  • 6.13.6 to before 6.14Affected
LinuxLinux
  • 6.14Affected
  • before 6.14Not affected
  • 6.12.75 through 6.12.*Not affected
  • 6.18.14 through 6.18.*Not affected
  • 6.19.4 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.