Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Thermal: int340x: Added a NULL check for adev. Not all devices have an ACPI companion fwnode; therefore, adev may be NULL. This is similar to the change made in commit cd2fd6eab480 “platform/x86: int3472: Check for adev == NULL”....

The vulnerability of the hi3660_thermal_probe() function in the drivers/thermal/hisi_thermal.c module of the Linux kernel’s temperature control driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the hi3660thermalprobe function in the drivers/thermal/hisithermal.c module of the Linux kernel’s temperature control driver is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow an attacker to compromise...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993021)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993021 advisory. In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/hisi: Drop second sensor hi3660 The commit 74c8e6bffbe1 driver core: Add allocsiz...

EUVD-2023-60514

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

The vulnerability of the loongson2_thermal_probe() function in the drivers/thermal/loongson2_thermal.c module of the Linux kernel temperature control driver allows a hacker to cause a system failure.

The vulnerability of the loongson2thermalprobe function in the drivers/thermal/loongson2thermal.c file of the Linux kernel temperature control driver is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989732)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989732 advisory. In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/broadcom: Fix potential NULL dereference in srthermalprobe platformgetresource ma...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988825)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988825 advisory. In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/imxscthermal: Fix refcount leak in imxscthermalprobe offindnodebyname returns a...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987049)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987049 advisory. In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/broadcom: Fix potential NULL dereference in srthermalprobe platformgetresource ma...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-390533)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-390533 advisory. In the Linux kernel, the following vulnerability has been resolved: thermal: int340x: Add NULL check for adev Not all devices have an ACPI companion fwnode, so adev...

CVE-2023-53242 thermal/drivers/hisi: Drop second sensor hi3660

In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/hisi: Drop second sensor hi3660 The commit 74c8e6bffbe1 "driver core: Add allocsize hint to devm allocators" exposes a panic "BRK handler: Fatal exception" on the hi3660thermalprobe funciton. This is because the...

CBL Mariner 2.0 Security Update: kernel (CVE-2025-23136)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-23136 advisory. - In the Linux kernel, the following vulnerability has been resolved: thermal: int340x: Add NULL check for ade...

UBUNTU-CVE-2025-23136

In the Linux kernel, the following vulnerability has been resolved: thermal: int340x: Add NULL check for adev Not all devices have an ACPI companion fwnode, so adev might be NULL. This is similar to the commit cd2fd6eab480 "platform/x86: int3472: Check for adev == NULL". Add a check for adev not...

CVE-2025-23136

CVE-2025-23136 (Linux kernel, thermal/int340x): The issue arises when an ACPI companion fwnode is missing and the kernel may dereference a NULL adev in int3402_thermal_probe() (and similarly in int3400_thermal_probe()). The fix adds a NULL check for adev and returns -ENODEV when it is not set, pr...

UBUNTU-CVE-2022-49459

In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/broadcom: Fix potential NULL dereference in srthermalprobe platformgetresource may return NULL, add proper check to avoid potential NULL dereferencing...

CVE-2022-49459 thermal/drivers/broadcom: Fix potential NULL dereference in sr_thermal_probe

In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/broadcom: Fix potential NULL dereference in srthermalprobe platformgetresource may return NULL, add proper check to avoid potential NULL dereferencing...

GSD-2022-1003772 thermal/drivers/broadcom: Fix potential NULL dereference in sr_thermal_probe

thermal/drivers/broadcom: Fix potential NULL dereference in srthermalprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...

PT-2022-31353

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description A potential NULL dereference issue was identified in the sr thermal probe function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

PT-2022-31856

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.121 Description A potential NULL dereference issue was identified in the sr thermal probe function of the thermal drivers for Broadcom in the Linux Kernel. The actual impact and attack plausibility have not...

PT-2022-31625

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description A potential NULL dereference issue was identified in the sr thermal probe function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

PT-2022-31005

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.7 through v5.18.2 Description A refcount leak was discovered in the imx sc thermal probe function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v5.7...