In the Linux kernel, the following vulnerability has been resolved:
thermal: Fix NULL pointer dereferences in of_thermal_ functions
of_parse_thermal_zones() parses the thermal-zones node and registers a thermal_zone device for each subnode. However, if a thermal zone is consuming a thermal sensor and that thermal sensor device hasn't probed yet, an attempt to set trip_point_*_temp for that thermal zone device can cause a NULL pointer dereference. Fix it.
console:/sys/class/thermal/thermal_zone87 # echo 120000 > trip_point_0_temp ... Unable to handle kernel NULL pointer dereference at virtual address 0000000000000020 ... Call trace: of_thermal_set_trip_temp+0x40/0xc4 trip_point_temp_store+0xc0/0x1dc dev_attr_store+0x38/0x88 sysfs_kf_write+0x64/0xc0 kernfs_fop_write_iter+0x108/0x1d0 vfs_write+0x2f4/0x368 ksys_write+0x7c/0xec __arm64_sys_write+0x20/0x30 el0_svc_common.llvm.7279915941325364641+0xbc/0x1bc do_el0_svc+0x28/0xa0 el0_svc+0x14/0x24 el0_sync_handler+0x88/0xec el0_sync+0x1c0/0x200
While at it, fix the possible NULL pointer dereference in other functions as well: of_thermal_get_temp(), of_thermal_set_emul_temp(), of_thermal_get_trend().
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.82-83.359Upgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-develUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools | Aug 28, 2024 | Apr 10, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 10, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 10, 2024 |
| Suse | — | Upgrade dtb-hisiliconUpgrade kernel-obs-qaUpgrade kernel-debugUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-rtUpgrade kernel-default-manUpgrade gfs2-kmp-64kbUpgrade dtb-amlogicUpgrade dtb-exynosUpgrade kernel-rt_debugUpgrade dtb-apmUpgrade kernel-syms-rtUpgrade kernel-default-develUpgrade dtb-amazonUpgrade dlm-kmp-azureUpgrade kernel-devel-azureUpgrade dlm-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-kvmsmallUpgrade kernel-syms-azureUpgrade kernel-64kbUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade dtb-socionextUpgrade kernel-symsUpgrade kernel-kvmsmall-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-devel-rtUpgrade cluster-md-kmp-azureUpgrade kernel-macrosUpgrade kernel-kvmsmall-develUpgrade kernel-sourceUpgrade kernel-default-extraUpgrade kernel-64kb-develUpgrade kernel-zfcpdumpUpgrade dtb-qcomUpgrade kernel-azure-develUpgrade kernel-rt-develUpgrade kernel-rt-livepatch-develUpgrade kernel-docsUpgrade dtb-mediatekUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-preemptUpgrade kselftests-kmp-defaultUpgrade dtb-armUpgrade kernel-azure-livepatch-develUpgrade dtb-sprdUpgrade kernel-default-base-rebuildUpgrade dtb-renesasUpgrade kernel-source-rtUpgrade kernel-source-vanillaUpgrade kernel-default-optionalUpgrade kernel-rt_debug-develUpgrade kernel-rt-vdsoUpgrade kernel-debug-vdsoUpgrade gfs2-kmp-azureUpgrade dtb-rockchipUpgrade dtb-appleUpgrade kernel-default-livepatch-develUpgrade kernel-debug-develUpgrade kernel-azure-baseUpgrade dtb-nvidiaUpgrade kernel-kvmsmall-vdsoUpgrade kernel-develUpgrade dtb-allwinnerUpgrade dtb-caviumUpgrade dtb-alteraUpgrade kernel-azureUpgrade dtb-lgUpgrade kernel-obs-buildUpgrade kernel-rt-livepatchUpgrade kernel-64kb-extraUpgrade kernel-rt-extraUpgrade kernel-preempt-develUpgrade kernel-rt_debug-livepatch-develUpgrade ocfs2-kmp-azureUpgrade dtb-xilinxUpgrade kselftests-kmp-64kbUpgrade kernel-default-baseUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-extraUpgrade dtb-broadcomUpgrade dtb-amdUpgrade cluster-md-kmp-64kbUpgrade dtb-marvellUpgrade kselftests-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-default-livepatchUpgrade kernel-azure-optionalUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-defaultUpgrade dtb-freescaleUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-default-vdsoUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-rt | Aug 9, 2024 | Apr 10, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-aws-fips-4.15Upgrade linux-image-4.4.0-283-lowlatencyUpgrade linux-image-azure-fips-4.15Upgrade linux-image-4.15.0-254-lowlatencyUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.4.0-283-genericUpgrade linux-image-gkeUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.15.0-1204-azureUpgrade linux-image-oemUpgrade linux-image-gcpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-awsUpgrade linux-image-4.4.0-1194-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-1205-azureUpgrade linux-image-4.15.0-254-genericUpgrade linux-image-virtualUpgrade linux-image-4.15.0-1194-awsUpgrade linux-image-4.15.0-253-genericUpgrade linux-image-oracleUpgrade linux-image-oracle-4.15Upgrade linux-image-azure-4.15Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-kvmUpgrade linux-image-aws-fipsUpgrade linux-image-4.4.0-1156-awsUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-2132-aws-fipsUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.4.0-1126-fipsUpgrade linux-image-4.15.0-1149-fipsUpgrade linux-image-4.15.0-1156-oracleUpgrade linux-image-gcp-fips-4.15Upgrade linux-image-4.15.0-1187-gcpUpgrade linux-image-fipsUpgrade linux-image-4.15.0-253-lowlatencyUpgrade linux-image-4.4.0-1157-kvmUpgrade linux-image-gcp-4.15Upgrade linux-image-4.15.0-1176-kvmUpgrade linux-image-azure-fipsUpgrade linux-image-azureUpgrade linux-image-4.15.0-1195-awsUpgrade linux-image-4.15.0-1188-gcpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-2095-gcp-fipsUpgrade linux-image-lowlatencyUpgrade linux-image-genericUpgrade linux-image-4.15.0-2112-azure-fipsUpgrade linux-image-gcp-fipsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-aws-4.15 | Nov 19, 2024 | Apr 10, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 10, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub