Linux Distros Unpatched Vulnerability : CVE-2024-36956

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: thermal/debugfs: Free all thermal zone debug memory on zone removal Because...

CVE-2024-36956

CVE-2024-36956 affects the Linux kernel’s thermal subsystem (thermal/debugfs). The root cause is that thermal_debug_tz_remove() does not free all allocated memory for thermal zone diagnostics when a zone is removed, making some memory unreachable. The vulnerability is addressed by modifying therm...

PT-2024-4111

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.8 Description The issue is related to a memory leak in the thermal zone diagnostics of the Linux kernel. The function thermal debug tz remove does not free all allocated memory for thermal zone diagnostics,...