CVE-2025-20671

In thermal, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09698599; Issue ID: MSV-3228...

PT-2023-5630 · Mediatek · Mediatek Microcode

Name of the Vulnerable Software and Affected Versions: MediaTek microcode affected versions not specified Description: The issue is related to a possible use after free due to a race condition in the thermal component, which could lead to local escalation of privilege. System execution privileges...

PT-2022-7483 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a memory leak in the int3400 notify function of the Linux kernel's int340x thermal component. This memory leak can be easily triggered on the TigerLake platform...

PT-2021-26558

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.14 Description The issue concerns out-of-bounds memory accesses in the mlxsw thermal component. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.10 and fix...

PT-2021-30466

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.155 Description The issue concerns out-of-bounds memory accesses in the mlxsw thermal component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2021-8174

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a NULL pointer dereference in the thermal component of the Linux kernel. Specifically, when a thermal zone is consuming a thermal sensor and that sensor device...

PT-2021-26373

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.14.14 Description: The issue concerns out-of-bounds memory accesses in the mlxsw thermal component. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.10 and...

PT-2021-30291

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.155 Description The issue concerns out-of-bounds memory accesses in the mlxsw thermal component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2021-26296

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.155 Description: The issue concerns out-of-bounds memory accesses in the mlxsw thermal component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versio...