In the Linux kernel, the following vulnerability has been resolved:
thermal/debugfs: Prevent use-after-free from occurring after cdev removal
Since thermal_debug_cdev_remove() does not run under cdev->lock, it can run in parallel with thermal_debug_cdev_state_update() and it may free the struct thermal_debugfs object used by the latter after it has been checked against NULL.
If that happens, thermal_debug_cdev_state_update() will access memory that has been freed already causing the kernel to crash.
Address this by using cdev->lock in thermal_debug_cdev_remove() around the cdev->debugfs value check (in case the same cdev is removed at the same time in two different threads) and its reset to NULL.
Cc :6.8+ <[email protected]> # 6.8+
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Dec 5, 2024 | May 30, 2024 |
| Suse | — | Upgrade kernel-sourceUpgrade kernel-default-develUpgrade kernel-64kbUpgrade kernel-obs-buildUpgrade kernel-64kb-develUpgrade kernel-docsUpgrade kernel-develUpgrade kernel-symsUpgrade kernel-macrosUpgrade kernel-defaultUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-default | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-kvmUpgrade linux-image-raspiUpgrade linux-image-ibmUpgrade linux-image-azure-fdeUpgrade linux-image-azureUpgrade linux-image-awsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1012-azureUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-oracleUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidiaUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64kUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-oem-24.04aUpgrade linux-image-virtualUpgrade linux-image-nvidia-64kUpgrade linux-image-genericUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-oracle-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1010-ibm | Aug 9, 2024 | May 30, 2024 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub