In the Linux kernel, the following vulnerability has been resolved:
thermal: core: Reference count the zone in thermal_zone_get_by_id()
There are places in the thermal netlink code where nothing prevents the thermal zone object from going away while being accessed after it has been returned by thermal_zone_get_by_id().
To address this, make thermal_zone_get_by_id() get a reference on the thermal zone device object to be returned with the help of get_device(), under thermal_list_lock, and adjust all of its callers to this change with the help of the cleanup.h infrastructure.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 15, 2025 | Oct 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libs | Feb 11, 2025 | Oct 21, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftool | Feb 11, 2025 | Oct 21, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | May 15, 2025 | Oct 21, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1025-azureUpgrade linux-image-6.8.0-56-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-oracle-64kUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-oem-24.04Upgrade linux-image-kvmUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-azureUpgrade linux-image-6.8.0-56-lowlatencyUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1024-nvidia-64kUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1024-oemUpgrade linux-image-6.8.0-56-generic-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-genericUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-nvidia-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-azure-fdeUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-6.8.0-1025-awsUpgrade linux-image-6.8.0-1024-nvidiaUpgrade linux-image-gcpUpgrade linux-image-oem-22.04dUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1008-gkeopUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1022-oracle-64kUpgrade linux-image-6.8.0-1022-oracleUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-6.8.0-1024-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1024-nvidia-lowlatencyUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-6.8.0-57-genericUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1026-gcp-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-virtualUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-56-genericUpgrade linux-image-6.8.0-1026-gcpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-oem-22.04Upgrade linux-image-awsUpgrade linux-image-oem-24.04bUpgrade linux-image-6.8.1-1018-realtimeUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1021-gkeUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-ibm | Feb 20, 2025 | Oct 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub