CVE-2026-46021

thermal: core: Fix thermal zone governor cleanup issues

State: Published
Severity: Not scored
Published: May 27, 2026
Updated: Oct 15, 2026
Reserved: May 13, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

thermal: core: Fix thermal zone governor cleanup issues

If thermal_zone_device_register_with_trips() fails after adding a thermal governor to the thermal zone being registered, the governor is not removed from it as appropriate which may lead to a memory leak.

In turn, thermal_zone_device_unregister() calls thermal_set_governor() without acquiring the thermal zone lock beforehand which may race with a governor update via sysfs and may lead to a use-after-free in that case.

Address these issues by adding two thermal_set_governor() calls, one to thermal_release() to remove the governor from the given thermal zone, and one to the thermal zone registration error path to cover failures preceding the thermal zone device registration.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	e33df1d2f3a0141cd79e770f31999ba0dd7ebfa8 to before a172fa18bc370b776ac1510abb0dcb50a7a35facAffected e33df1d2f3a0141cd79e770f31999ba0dd7ebfa8 to before 8e563d8db50f303171aceb79eec0807e7ba06951Affected e33df1d2f3a0141cd79e770f31999ba0dd7ebfa8 to before d4eb861adde5ce22e459fbd29366f47bb2167977Affected e33df1d2f3a0141cd79e770f31999ba0dd7ebfa8 to before 37a430a2d4e66ec8238da6c7f7e48809bf265e13Affected e33df1d2f3a0141cd79e770f31999ba0dd7ebfa8 to before f412e541d25a3dfaf3d53e012ade6ff03cae8a45Affected e33df1d2f3a0141cd79e770f31999ba0dd7ebfa8 to before 75f8f3c3e09122270986de9d7aa347d701676761Affected e33df1d2f3a0141cd79e770f31999ba0dd7ebfa8 to before 64d4ebf91d082034bbc5ae3ba2d7fd800bc02d06Affected e33df1d2f3a0141cd79e770f31999ba0dd7ebfa8 to before 41ff66baf81c6541f4f985dd7eac4494d03d9440Affected
LinuxLinux	4.2Affected before 4.2Not affected 5.10.259 through 5.10.Not affected 5.15.210 through 5.15.Not affected 6.1.176 through 6.1.Not affected 6.6.140 through 6.6.Not affected 6.12.86 through 6.12.Not affected 6.18.27 through 6.18.Not affected 7.0.4 through 7.0.*Not affected 7.1 and laterNot affected

Product

Versions

LinuxLinux

e33df1d2f3a0141cd79e770f31999ba0dd7ebfa8 to before a172fa18bc370b776ac1510abb0dcb50a7a35facAffected
e33df1d2f3a0141cd79e770f31999ba0dd7ebfa8 to before 8e563d8db50f303171aceb79eec0807e7ba06951Affected
e33df1d2f3a0141cd79e770f31999ba0dd7ebfa8 to before d4eb861adde5ce22e459fbd29366f47bb2167977Affected
e33df1d2f3a0141cd79e770f31999ba0dd7ebfa8 to before 37a430a2d4e66ec8238da6c7f7e48809bf265e13Affected
e33df1d2f3a0141cd79e770f31999ba0dd7ebfa8 to before f412e541d25a3dfaf3d53e012ade6ff03cae8a45Affected
e33df1d2f3a0141cd79e770f31999ba0dd7ebfa8 to before 75f8f3c3e09122270986de9d7aa347d701676761Affected
e33df1d2f3a0141cd79e770f31999ba0dd7ebfa8 to before 64d4ebf91d082034bbc5ae3ba2d7fd800bc02d06Affected
e33df1d2f3a0141cd79e770f31999ba0dd7ebfa8 to before 41ff66baf81c6541f4f985dd7eac4494d03d9440Affected

LinuxLinux

4.2Affected
before 4.2Not affected
5.10.259 through 5.10.*Not affected
5.15.210 through 5.15.*Not affected
6.1.176 through 6.1.*Not affected
6.6.140 through 6.6.*Not affected
6.12.86 through 6.12.*Not affected
6.18.27 through 6.18.*Not affected
7.0.4 through 7.0.*Not affected
7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.