CVE-2026-45925 Details
Description
In the Linux kernel, the following vulnerability has been resolved: thermal/of: Fix reference leak in thermal_of_cm_lookup() In thermal_of_cm_lookup(), tr_np is obtained via of_parse_phandle(), but never released. Use the __free(device_node) cleanup attribute to automatically release the node and fix the leak. [ rjw: Changelog edits ]
A reference leak vulnerability has been identified in the Linux kernel's thermal component management lookup function. The issue arises because a device node reference, obtained through the 'of_parse_phandle' function, is not released after use. This leak can lead to increased memory consumption over time. The vulnerability affects the Linux kernel stable tree.
The vulnerability has been addressed by modifying the 'thermal_of_cm_lookup' function to use the '__free(device_node)' cleanup attribute, ensuring that device node references are properly released after use.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/025796ccd7f9f2e013e12319de26b6c021a80c1f | kernel.org | Patch |
| https://git.kernel.org/stable/c/8344d5da9df74fdbef676214d0c482fc822a01ca | kernel.org | Patch |
| https://git.kernel.org/stable/c/8af710156c53cdb392d529497ef2b3a10a1f9370 | kernel.org | Patch |
| https://git.kernel.org/stable/c/a1fe789a96fe47733c133134fd264cb7ca832395 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-Other | Weakness Not in a Standard CWE Category | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.12.18, < 6.12.75 >= 6.13.6, < 6.14 >= 6.14.1, < 6.18.14 >= 6.19, < 6.19.4 6.14 - 6.14 rc5 6.14 rc6 6.14 rc7 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 25, 2026 | Initial Analysis | [email protected] |
| Jun 17, 2026 | CVE Modified | kernel.org |
| May 27, 2026 | New CVE Received | kernel.org |