In the Linux kernel, the following vulnerability has been resolved:
thermal: Fix NULL pointer dereferences in of_thermal_ functions
of_parse_thermal_zones() parses the thermal-zones node and registers a thermal_zone device for each subnode. However, if a thermal zone is consuming a thermal sensor and that thermal sensor device hasn't probed yet, an attempt to set trip_point_*_temp for that thermal zone device can cause a NULL pointer dereference. Fix it.
console:/sys/class/thermal/thermal_zone87 # echo 120000 > trip_point_0_temp ... Unable to handle kernel NULL pointer dereference at virtual address 0000000000000020 ... Call trace: of_thermal_set_trip_temp+0x40/0xc4 trip_point_temp_store+0xc0/0x1dc dev_attr_store+0x38/0x88 sysfs_kf_write+0x64/0xc0 kernfs_fop_write_iter+0x108/0x1d0 vfs_write+0x2f4/0x368 ksys_write+0x7c/0xec __arm64_sys_write+0x20/0x30 el0_svc_common.llvm.7279915941325364641+0xbc/0x1bc do_el0_svc+0x28/0xa0 el0_svc+0x14/0x24 el0_sync_handler+0x88/0xec el0_sync+0x1c0/0x200
While at it, fix the possible NULL pointer dereference in other functions as well: of_thermal_get_temp(), of_thermal_set_emul_temp(), of_thermal_get_trend().
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade python-perfUpgrade kernel-livepatch-5.10.82-83.359Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-headers | Aug 28, 2024 | Apr 10, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 10, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 10, 2024 |
| Suse | — | Upgrade kernel-sourceUpgrade dtb-hisiliconUpgrade kernel-macrosUpgrade kernel-zfcpdumpUpgrade dlm-kmp-azureUpgrade dtb-amlogicUpgrade dtb-amazonUpgrade kernel-rtUpgrade kernel-default-extraUpgrade ocfs2-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-64kbUpgrade kernel-64kb-livepatch-develUpgrade dtb-qcomUpgrade kernel-symsUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-develUpgrade gfs2-kmp-64kbUpgrade kernel-preemptUpgrade kernel-devel-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-develUpgrade dtb-socionextUpgrade kernel-64kb-optionalUpgrade kernel-docsUpgrade kernel-debugUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-develUpgrade kernel-azure-develUpgrade reiserfs-kmp-azureUpgrade dtb-apmUpgrade dtb-exynosUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-mediatekUpgrade kernel-debug-livepatch-develUpgrade kernel-syms-azureUpgrade kernel-azure-vdsoUpgrade kernel-obs-qaUpgrade dtb-armUpgrade kernel-default-manUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmallUpgrade kernel-rt_debugUpgrade kernel-azure-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-develUpgrade reiserfs-kmp-rtUpgrade gfs2-kmp-rtUpgrade kernel-source-azureUpgrade kernel-azure-extraUpgrade kernel-azureUpgrade kernel-default-livepatchUpgrade kernel-azure-optionalUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade dtb-caviumUpgrade dtb-alteraUpgrade dtb-freescaleUpgrade kernel-source-vanillaUpgrade kernel-default-vdsoUpgrade reiserfs-kmp-defaultUpgrade dtb-nvidiaUpgrade dtb-appleUpgrade cluster-md-kmp-64kbUpgrade dtb-broadcomUpgrade dtb-amdUpgrade kernel-default-baseUpgrade reiserfs-kmp-64kbUpgrade dtb-lgUpgrade gfs2-kmp-azureUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-azureUpgrade dtb-marvellUpgrade dtb-renesasUpgrade cluster-md-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-xilinxUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-64kbUpgrade kernel-debug-develUpgrade kernel-azure-baseUpgrade kernel-docs-htmlUpgrade dtb-sprdUpgrade dtb-allwinnerUpgrade kselftests-kmp-azureUpgrade kernel-defaultUpgrade kernel-64kb-extraUpgrade kernel-rt-extraUpgrade kernel-default-base-rebuildUpgrade kernel-develUpgrade kernel-rt_debug-develUpgrade dtb-rockchipUpgrade kernel-obs-buildUpgrade kernel-default-optionalUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-rt-livepatchUpgrade kernel-preempt-develUpgrade kselftests-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-rt-optional | Aug 9, 2024 | Apr 10, 2024 |
| Ubuntu | — | Upgrade linux-image-gcp-fips-4.15Upgrade linux-image-4.15.0-1187-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1195-awsUpgrade linux-image-genericUpgrade linux-image-azure-fipsUpgrade linux-image-4.15.0-2112-azure-fipsUpgrade linux-image-4.15.0-1188-gcpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-aws-hweUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1176-kvmUpgrade linux-image-gcp-4.15Upgrade linux-image-4.15.0-2095-gcp-fipsUpgrade linux-image-4.15.0-2132-aws-fipsUpgrade linux-image-gcp-fipsUpgrade linux-image-aws-4.15Upgrade linux-image-4.4.0-1126-fipsUpgrade linux-image-azureUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.4.0-1157-kvmUpgrade linux-image-4.15.0-1149-fipsUpgrade linux-image-4.15.0-253-lowlatencyUpgrade linux-image-fipsUpgrade linux-image-4.15.0-1156-oracleUpgrade linux-image-4.15.0-1194-awsUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-azure-4.15Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-azure-fips-4.15Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-gkeUpgrade linux-image-4.15.0-1204-azureUpgrade linux-image-aws-fips-4.15Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oemUpgrade linux-image-4.15.0-254-genericUpgrade linux-image-oracle-4.15Upgrade linux-image-gcpUpgrade linux-image-awsUpgrade linux-image-4.15.0-1205-azureUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-1194-awsUpgrade linux-image-aws-fipsUpgrade linux-image-virtualUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-kvmUpgrade linux-image-4.4.0-283-genericUpgrade linux-image-4.4.0-1156-awsUpgrade linux-image-4.15.0-253-genericUpgrade linux-image-oracleUpgrade linux-image-4.15.0-254-lowlatencyUpgrade linux-image-4.4.0-283-lowlatency | Nov 19, 2024 | Apr 10, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 10, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub