In the Linux kernel, the following vulnerability has been resolved:
thermal: Fix NULL pointer dereferences in of_thermal_ functions
of_parse_thermal_zones() parses the thermal-zones node and registers a thermal_zone device for each subnode. However, if a thermal zone is consuming a thermal sensor and that thermal sensor device hasn't probed yet, an attempt to set trip_point_*_temp for that thermal zone device can cause a NULL pointer dereference. Fix it.
console:/sys/class/thermal/thermal_zone87 # echo 120000 > trip_point_0_temp ... Unable to handle kernel NULL pointer dereference at virtual address 0000000000000020 ... Call trace: of_thermal_set_trip_temp+0x40/0xc4 trip_point_temp_store+0xc0/0x1dc dev_attr_store+0x38/0x88 sysfs_kf_write+0x64/0xc0 kernfs_fop_write_iter+0x108/0x1d0 vfs_write+0x2f4/0x368 ksys_write+0x7c/0xec __arm64_sys_write+0x20/0x30 el0_svc_common.llvm.7279915941325364641+0xbc/0x1bc do_el0_svc+0x28/0xa0 el0_svc+0x14/0x24 el0_sync_handler+0x88/0xec el0_sync+0x1c0/0x200
While at it, fix the possible NULL pointer dereference in other functions as well: of_thermal_get_temp(), of_thermal_set_emul_temp(), of_thermal_get_trend().
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.82-83.359Upgrade python-perfUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade perf | Aug 28, 2024 | Apr 10, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 10, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 10, 2024 |
| Suse | — | Upgrade kernel-azure-vdsoUpgrade dtb-amazonUpgrade gfs2-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-azure-develUpgrade kernel-rt_debugUpgrade kernel-rt-develUpgrade kernel-64kb-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-devel-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-preemptUpgrade kernel-symsUpgrade kernel-64kb-livepatch-develUpgrade dtb-qcomUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-debug-livepatch-develUpgrade kernel-default-develUpgrade dtb-exynosUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-default-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-sourceUpgrade kernel-source-azureUpgrade kernel-64kbUpgrade kernel-kvmsmall-develUpgrade dtb-apmUpgrade kernel-docsUpgrade kernel-macrosUpgrade dtb-mediatekUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-devel-azureUpgrade reiserfs-kmp-rtUpgrade dtb-amlogicUpgrade kernel-rtUpgrade kernel-syms-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-kvmsmallUpgrade dtb-armUpgrade kernel-debugUpgrade kernel-default-manUpgrade kselftests-kmp-defaultUpgrade dtb-hisiliconUpgrade dtb-socionextUpgrade kernel-64kb-optionalUpgrade dlm-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-64kbUpgrade dtb-renesasUpgrade dtb-marvellUpgrade dtb-allwinnerUpgrade dtb-nvidiaUpgrade kernel-azure-baseUpgrade kernel-develUpgrade kernel-debug-develUpgrade dtb-sprdUpgrade kernel-debug-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-azureUpgrade dtb-lgUpgrade dtb-rockchipUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-azure-optionalUpgrade gfs2-kmp-defaultUpgrade dtb-caviumUpgrade reiserfs-kmp-defaultUpgrade kernel-docs-htmlUpgrade kernel-default-vdsoUpgrade kernel-rt-extraUpgrade kselftests-kmp-azureUpgrade kernel-preempt-develUpgrade kernel-source-vanillaUpgrade kernel-source-rtUpgrade kernel-rt-livepatchUpgrade dtb-alteraUpgrade dtb-freescaleUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-default-livepatchUpgrade dlm-kmp-64kbUpgrade dtb-appleUpgrade gfs2-kmp-azureUpgrade kernel-default-baseUpgrade dtb-amdUpgrade kernel-azure-extraUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-default-optionalUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-livepatch-develUpgrade dtb-xilinx | Aug 9, 2024 | Apr 10, 2024 |
| Ubuntu | — | Upgrade linux-image-gcp-fipsUpgrade linux-image-4.15.0-2132-aws-fipsUpgrade linux-image-4.15.0-1156-oracleUpgrade linux-image-4.15.0-1176-kvmUpgrade linux-image-aws-4.15Upgrade linux-image-4.15.0-2095-gcp-fipsUpgrade linux-image-4.15.0-2112-azure-fipsUpgrade linux-image-lowlatencyUpgrade linux-image-genericUpgrade linux-image-gcp-4.15Upgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-253-lowlatencyUpgrade linux-image-fipsUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1187-gcpUpgrade linux-image-4.4.0-1157-kvmUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1149-fipsUpgrade linux-image-azureUpgrade linux-image-gcp-fips-4.15Upgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-1188-gcpUpgrade linux-image-4.15.0-1195-awsUpgrade linux-image-4.4.0-1126-fipsUpgrade linux-image-azure-fipsUpgrade linux-image-4.15.0-253-genericUpgrade linux-image-azure-fips-4.15Upgrade linux-image-aws-fips-4.15Upgrade linux-image-aws-fipsUpgrade linux-image-4.4.0-1156-awsUpgrade linux-image-aws-lts-18.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-oracleUpgrade linux-image-azure-4.15Upgrade linux-image-4.15.0-1205-azureUpgrade linux-image-awsUpgrade linux-image-4.15.0-1204-azureUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-283-genericUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1194-awsUpgrade linux-image-kvmUpgrade linux-image-4.15.0-254-lowlatencyUpgrade linux-image-4.15.0-254-genericUpgrade linux-image-virtualUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.4.0-283-lowlatencyUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-gkeUpgrade linux-image-4.4.0-1194-awsUpgrade linux-image-oemUpgrade linux-image-gcpUpgrade linux-image-oracle-4.15 | Nov 19, 2024 | Apr 10, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 10, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub