CVE-2026-43332 Details
Description
In the Linux kernel, the following vulnerability has been resolved: thermal: core: Fix thermal zone device registration error path If thermal_zone_device_register_with_trips() fails after registering a thermal zone device, it needs to wait for the tz->removal completion like thermal_zone_device_unregister(), in case user space has managed to take a reference to the thermal zone device's kobject, in which case thermal_release() may not be called by the error path itself and tz may be freed prematurely. Add the missing wait_for_completion() call to the thermal zone device registration error path.
A vulnerability exists in the Linux kernel's thermal management subsystem, specifically in the handling of thermal zone device registrations. When the function 'thermal_zone_device_register_with_trips()' fails after a thermal zone device has been registered, it does not properly wait for the removal of the device to complete. This oversight can lead to a premature release of the device's resources, causing a NULL pointer dereference. The issue arises because user space may have taken a reference to the thermal zone device's kobject, preventing the 'thermal_release()' function from being called as needed. The vulnerability affects several versions of the Linux kernel.
The vulnerability has been addressed by adding the missing 'wait_for_completion()' call to the thermal zone device registration error path. Users should upgrade to the latest version of the Linux kernel where this fix has been applied.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/4d390f0e507dfb16d58f83a58d78d1150dc8b9d7 | kernel.org | Patch |
| https://git.kernel.org/stable/c/604da9c04c218362e1c1457304ebeb9c199d537c | kernel.org | Patch |
| https://git.kernel.org/stable/c/9e07e3b81807edd356e1f794cffa00a428eff443 | kernel.org | Patch |
| https://git.kernel.org/stable/c/9e796001af97a1f7368d5114b7a8533dd98d797a | kernel.org | Patch |
| https://git.kernel.org/stable/c/c4c7219e93319bba9ba0765dee597784c78f63c5 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.6.14, < 6.6.134 >= 6.8, < 6.12.81 >= 6.13, < 6.18.22 >= 6.19, < 6.19.12 6.7.2 7.0 rc1 7.0 rc2 7.0 rc3 7.0 rc4 7.0 rc5 7.0 rc6 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| May 18, 2026 | Initial Analysis | [email protected] |
| May 11, 2026 | CVE Modified | kernel.org |
| May 8, 2026 | New CVE Received | kernel.org |