In the Linux kernel, the following vulnerability has been resolved:
thermal: Fix NULL pointer dereferences in of_thermal_ functions
of_parse_thermal_zones() parses the thermal-zones node and registers a thermal_zone device for each subnode. However, if a thermal zone is consuming a thermal sensor and that thermal sensor device hasn't probed yet, an attempt to set trip_point_*_temp for that thermal zone device can cause a NULL pointer dereference. Fix it.
console:/sys/class/thermal/thermal_zone87 # echo 120000 > trip_point_0_temp ... Unable to handle kernel NULL pointer dereference at virtual address 0000000000000020 ... Call trace: of_thermal_set_trip_temp+0x40/0xc4 trip_point_temp_store+0xc0/0x1dc dev_attr_store+0x38/0x88 sysfs_kf_write+0x64/0xc0 kernfs_fop_write_iter+0x108/0x1d0 vfs_write+0x2f4/0x368 ksys_write+0x7c/0xec __arm64_sys_write+0x20/0x30 el0_svc_common.llvm.7279915941325364641+0xbc/0x1bc do_el0_svc+0x28/0xa0 el0_svc+0x14/0x24 el0_sync_handler+0x88/0xec el0_sync+0x1c0/0x200
While at it, fix the possible NULL pointer dereference in other functions as well: of_thermal_get_temp(), of_thermal_set_emul_temp(), of_thermal_get_trend().
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade perfUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.82-83.359Upgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel | Aug 28, 2024 | Apr 10, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 10, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 10, 2024 |
| Suse | — | Upgrade kernel-source-vanillaUpgrade cluster-md-kmp-rtUpgrade dtb-alteraUpgrade dtb-caviumUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-64kb-extraUpgrade kernel-default-livepatch-develUpgrade dtb-broadcomUpgrade dtb-xilinxUpgrade dtb-rockchipUpgrade kernel-rt-extraUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-vdsoUpgrade dtb-amdUpgrade dtb-allwinnerUpgrade kernel-azure-baseUpgrade kernel-debug-develUpgrade kernel-default-baseUpgrade kernel-rt-vdsoUpgrade dtb-sprdUpgrade kernel-default-livepatchUpgrade kernel-develUpgrade dtb-nvidiaUpgrade dtb-marvellUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-debug-vdsoUpgrade dlm-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-default-optionalUpgrade ocfs2-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-source-rtUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade dtb-appleUpgrade kernel-preempt-develUpgrade kernel-rt-livepatchUpgrade gfs2-kmp-azureUpgrade kernel-azure-optionalUpgrade dtb-renesasUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-docs-htmlUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade dtb-freescaleUpgrade dtb-lgUpgrade kernel-azureUpgrade kernel-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-obs-buildUpgrade dtb-amazonUpgrade kernel-rtUpgrade kernel-64kb-develUpgrade reiserfs-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-docsUpgrade kernel-debug-livepatch-develUpgrade gfs2-kmp-rtUpgrade dtb-qcomUpgrade kernel-rt_debugUpgrade kernel-azure-develUpgrade ocfs2-kmp-rtUpgrade kernel-rt-develUpgrade kernel-default-extraUpgrade kernel-macrosUpgrade kernel-syms-rtUpgrade kernel-sourceUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-azureUpgrade kernel-source-azureUpgrade dtb-amlogicUpgrade cluster-md-kmp-defaultUpgrade dtb-exynosUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-symsUpgrade kernel-preemptUpgrade kernel-devel-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-develUpgrade kernel-azure-livepatch-develUpgrade dtb-armUpgrade kernel-kvmsmallUpgrade kernel-64kbUpgrade dtb-socionextUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-azureUpgrade dtb-hisiliconUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-optionalUpgrade kernel-default-manUpgrade kselftests-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-debugUpgrade kernel-azure-vdsoUpgrade kernel-obs-qaUpgrade kernel-rt-livepatch-develUpgrade dtb-mediatekUpgrade dtb-apm | Aug 9, 2024 | Apr 10, 2024 |
| Ubuntu | — | Upgrade linux-image-aws-4.15Upgrade linux-image-4.15.0-1149-fipsUpgrade linux-image-gcp-fipsUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-2095-gcp-fipsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-genericUpgrade linux-image-4.15.0-1156-oracleUpgrade linux-image-gcp-fips-4.15Upgrade linux-image-fipsUpgrade linux-image-4.15.0-1187-gcpUpgrade linux-image-4.4.0-1126-fipsUpgrade linux-image-gcp-4.15Upgrade linux-image-4.15.0-1176-kvmUpgrade linux-image-azureUpgrade linux-image-azure-fipsUpgrade linux-image-4.15.0-253-lowlatencyUpgrade linux-image-4.15.0-2112-azure-fipsUpgrade linux-image-4.15.0-2132-aws-fipsUpgrade linux-image-4.4.0-283-genericUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-awsUpgrade linux-image-azure-4.15Upgrade linux-image-aws-fips-4.15Upgrade linux-image-kvmUpgrade linux-image-virtualUpgrade linux-image-4.15.0-1194-awsUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.15.0-253-genericUpgrade linux-image-4.4.0-283-lowlatencyUpgrade linux-image-oracle-4.15Upgrade linux-image-azure-fips-4.15Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-1204-azureUpgrade linux-image-4.4.0-1156-awsUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-aws-fipsUpgrade linux-image-4.15.0-1205-azure | Nov 19, 2024 | Apr 10, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 10, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub