CVE-2026-90178

This is a memory leak in the Linux kernel's coretemp hwmon driver , affecting CPUs that lack the X86_FEATURE_PTS (Package Thermal Status) feature. The pdata->core_data array is allocated in init_temp_data() but is only freed from destroy_temp_data() in the package-data branch, which is never r...

EUVD-2026-81771

In the Linux kernel, the following vulnerability has been resolved: hwmon: coretemp Fix coredata leak on CPUs without PTS pdata-coredata is allocated in inittempdata when the first core tempdata of a package is created, but it is only released from destroytempdata, and only in the branch that...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: hwmon: coretemp Fixed out-of-bounds memory access. Fixed a bug where pdata-cpumap was set before the out-of-bounds check. This issue may occur on systems with more than 128 cores per package...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: hwmon: coretemp Simplified platform device handling Coretemp’s platform driver is unconventional. All the actual processing is performed globally by the initcall and CPU hotplug notifiers. The “driver” essentially just wraps t...

The vulnerability of the `coretemp_device_add()` function in the `drivers/hwmon/coretemp.c` driver module for monitoring Linux kernel equipment allows a hacker to cause a service failure.

The vulnerability of the coretempdeviceadd function in the drivers/hwmon/coretemp.c driver for monitoring hardware in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: hwmon: In coretemp, a bug was fixed regarding the reference count leak of PCI devices in nv1aramnew. According to the comments on pcigetdomainbusandslot, it returns a PCI device whose reference count is incremented after use...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: hwmon: In the coretemp function, check if the parameter is null before removing it from the sysfsattrs structure. If an error occurs in coretempaddcore, pdata-coredataindx is already NULL and has been freed. Do not pass this valu...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-006904)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006904 advisory. In the Linux kernel, the following vulnerability has been resolved: hwmon: coretemp Simplify platform device handling Coretemp's platform driver is unconventional. A...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011035)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011035 advisory. In the Linux kernel, the following vulnerability has been resolved: hwmon: coretemp Simplify platform device handling Coretemp's platform driver is unconventional. A...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-006581)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006581 advisory. In the Linux kernel, the following vulnerability has been resolved: hwmon: coretemp Simplify platform device handling Coretemp's platform driver is unconventional. A...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-989752)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989752 advisory. In the Linux kernel, the following vulnerability has been resolved: hwmon: coretemp fix pci device refcount leak in nv1aramnew As comment of pcigetdomainbusandslot...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-989605)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989605 advisory. In the Linux kernel, the following vulnerability has been resolved: hwmon: coretemp Check for null before removing sysfs attrs If coretempaddcore gets an error then...

EUVD-2023-59996

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix NULL dereference in niwriteinode Syzbot reports a NULL dereference in niwriteinode. When creating a new inode, if allocation fails in miinit function called in miformatnew function, mi-mrec is set to NULL. In the...

Kernel OVA security updates in ASCG 3.3.0a

CVE-2025-21756 vsock: Keep the binding until socket destruction CVE-2022-49011 hwmon: coretemp fix pci device refcount leak in nv1aramnew CVE-2024-53141 netfilter: ipset: add missing range check in bitmapipuadt CVE-2025-32462 Sudo before 1.9.17p1, when used with a sudoers file that specifies a ho...

Linux Distros Unpatched Vulnerability : CVE-2023-53612

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwmon: coretemp Simplify platform device handling Coretemp's platform driver is unconventional. All the real work is done globally by the initcall and CPU hotpl...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-986660)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986660 advisory. In the Linux kernel, the following vulnerability has been resolved: hwmon: coretemp Check for null before removing sysfs attrs If coretempaddcore gets an error then...

SUSE CVE-2023-53612

In the Linux kernel, the following vulnerability has been resolved: hwmon: coretemp Simplify platform device handling Coretemp's platform driver is unconventional. All the real work is done globally by the initcall and CPU hotplug notifiers, while the "driver" effectively just wraps an allocation...

CVE-2023-53612

In the Linux kernel, the following vulnerability has been resolved: hwmon: coretemp Simplify platform device handling Coretemp's platform driver is unconventional. All the real work is done globally by the initcall and CPU hotplug notifiers, while the "driver" effectively just wraps an allocation...

UBUNTU-CVE-2023-53612

In the Linux kernel, the following vulnerability has been resolved: hwmon: coretemp Simplify platform device handling Coretemp's platform driver is unconventional. All the real work is done globally by the initcall and CPU hotplug notifiers, while the "driver" effectively just wraps an allocation...

CVE-2023-53612 hwmon: (coretemp) Simplify platform device handling

In the Linux kernel, the following vulnerability has been resolved: hwmon: coretemp Simplify platform device handling Coretemp's platform driver is unconventional. All the real work is done globally by the initcall and CPU hotplug notifiers, while the "driver" effectively just wraps an allocation...