In the Linux kernel, the following vulnerability has been resolved:
thermal/debugfs: Prevent use-after-free from occurring after cdev removal
Since thermal_debug_cdev_remove() does not run under cdev->lock, it can run in parallel with thermal_debug_cdev_state_update() and it may free the struct thermal_debugfs object used by the latter after it has been checked against NULL.
If that happens, thermal_debug_cdev_state_update() will access memory that has been freed already causing the kernel to crash.
Address this by using cdev->lock in thermal_debug_cdev_remove() around the cdev->debugfs value check (in case the same cdev is removed at the same time in two different threads) and its reset to NULL.
Cc :6.8+ <[email protected]> # 6.8+
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Dec 5, 2024 | May 30, 2024 |
| Suse | — | Upgrade kernel-64kbUpgrade kernel-obs-buildUpgrade kernel-default-develUpgrade kernel-sourceUpgrade kernel-defaultUpgrade kernel-macrosUpgrade kernel-docsUpgrade reiserfs-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-64kb-develUpgrade kernel-develUpgrade kernel-syms | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-64kUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-oem-24.04Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-gkeUpgrade linux-image-nvidia-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1010-oemUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-azureUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-awsUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-ibmUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-raspiUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-kvmUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oracle | Aug 9, 2024 | May 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub