DEBIAN-CVE-2022-49945

In the Linux kernel, the following vulnerability has been resolved: hwmon: gpio-fan Fix array out of bounds access The driver does not check if the cooling state passed to gpiofansetcurstate exceeds the maximum cooling state as stored in fandata-numspeeds. Since the cooling state is later used as...

UBUNTU-CVE-2022-50194

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: aoss: Fix refcount leak in qmpcoolingdevicesregister Every iteration of foreachavailablechildofnode decrements the reference count of the previous node. When breaking early from a foreachavailablechildofnode loop, we...

CVE-2022-50194

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: aoss: Fix refcount leak in qmpcoolingdevicesregister Every iteration of foreachavailablechildofnode decrements the reference count of the previous node. When breaking early from a foreachavailablechildofnode loop, we...

CVE-2022-50194 soc: qcom: aoss: Fix refcount leak in qmp_cooling_devices_register

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: aoss: Fix refcount leak in qmpcoolingdevicesregister Every iteration of foreachavailablechildofnode decrements the reference count of the previous node. When breaking early from a foreachavailablechildofnode loop, we...

CVE-2022-49945 hwmon: (gpio-fan) Fix array out of bounds access

In the Linux kernel, the following vulnerability has been resolved: hwmon: gpio-fan Fix array out of bounds access The driver does not check if the cooling state passed to gpiofansetcurstate exceeds the maximum cooling state as stored in fandata-numspeeds. Since the cooling state is later used as...

CVE-2022-49945

The CVE-2022-49945 issue affects the Linux kernel hwmon gpio-fan driver. The vulnerability occurs because gpio_fan_set_cur_state() does not validate the cooling state against fan_data->num_speeds, allowing an out-of-bounds index in set_fan_speed(). Practical impact is potential kernel oops or ...

CVE-2022-49945 hwmon: (gpio-fan) Fix array out of bounds access

In the Linux kernel, the following vulnerability has been resolved: hwmon: gpio-fan Fix array out of bounds access The driver does not check if the cooling state passed to gpiofansetcurstate exceeds the maximum cooling state as stored in fandata-numspeeds. Since the cooling state is later used as...

PT-2025-25871 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been identified, specifically in the gpio-fan driver. The issue arises from the driver's failure to check if the cooling state passed to gpio fa...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: arm64: dts: qcom: x1e80100: Add GPU cooling Unlike the CPU, the GPU does not throttle its speed automatically when it reaches high temperatures. With certain high GPU loads, it is possible to reach the critical hardware shutdown...

Vulnerability of the `__thermal_cooling_device_register()` and `thermal_cooling_deviceDestroySysfs()` functions in the Linux operating system, allowing a hacker to trigger a service failure

The vulnerability of the thermalcoolingdeviceregister and thermalcoolingdeviceDestroySysfs functions in the Linux operating system is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2022-20569

In thermalcoolingdevicestatsupdate of thermalsysfs.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2023-53012

In the Linux kernel, the following vulnerability has been resolved: thermal: core: call putdevice only after deviceregister fails putdevice shouldn't be called before a prior call to deviceregister. thermalcoolingdeviceregister doesn't follow that properly and needs fixing. Also...

DEBIAN-CVE-2023-53012

In the Linux kernel, the following vulnerability has been resolved: thermal: core: call putdevice only after deviceregister fails putdevice shouldn't be called before a prior call to deviceregister. thermalcoolingdeviceregister doesn't follow that properly and needs fixing. Also...

CVE-2023-53012

CVE-2023-53012 is documented across multiple connected advisories as a Linux kernel vulnerability affecting the thermal subsystem. The issue arises from calling put_device() before a successful device_register(), specifically in __thermal_cooling_device_register(), and is accompanied by unnecessa...

CVE-2023-53012 thermal: core: call put_device() only after device_register() fails

In the Linux kernel, the following vulnerability has been resolved: thermal: core: call putdevice only after deviceregister fails putdevice shouldn't be called before a prior call to deviceregister. thermalcoolingdeviceregister doesn't follow that properly and needs fixing. Also...

The vulnerability of the cpu_power_to_freq() function in the drivers/thermal/cpufreq_cooling.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the cpupowertofreq function in the drivers/thermal/cpufreqcooling.c module of the Linux kernel is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux Distros Unpatched Vulnerability : CVE-2021-47441

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mlxsw: thermal: Fix out-of-bounds memory accesses Currently, mlxsw allows cooling states to be set above the maximum cooling state supported by the driver: cat...

Carrier Block Load 代码问题漏洞

Carrier Block Load is an application from Carrier, Inc. which provides easy-to-use commercial load calculations for HVAC systems. A security vulnerability exists in Carrier Block Load that stems from an uncontrolled path element that could lead to DLL hijacking and arbitrary code execution...

SUSE CVE-2022-49468

In the Linux kernel, the following vulnerability has been resolved: thermal/core: Fix memory leak in thermalcoolingdeviceregister I got memory leak as follows when doing fault injection test: unreferenced object 0xffff888010080000 size 264312: comm "182", pid 102533, jiffies 4296434960 age 10.100...

CVE-2022-49468

In the Linux kernel, the following vulnerability has been resolved: thermal/core: Fix memory leak in thermalcoolingdeviceregister I got memory leak as follows when doing fault injection test: unreferenced object 0xffff888010080000 size 264312: comm "182", pid 102533, jiffies 4296434960 age 10.100...