First published: Thu Mar 27 2025(Updated: )
In the Linux kernel, the following vulnerability has been resolved: thermal: core: call put_device() only after device_register() fails put_device() shouldn't be called before a prior call to device_register(). __thermal_cooling_device_register() doesn't follow that properly and needs fixing. Also thermal_cooling_device_destroy_sysfs() is getting called unnecessarily on few error paths. Fix all this by placing the calls at the right place. Based on initial work done by Caleb Connolly.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Affected Software | Affected Version | How to fix |
---|---|---|
Linux Kernel |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2023-53012 has been classified with a severity rating that indicates potential risk in the Linux kernel.
To fix CVE-2023-53012, you should update your Linux kernel to the latest version where the vulnerability has been patched.
CVE-2023-53012 affects the thermal component within the Linux kernel, specifically related to device registration.
There is no indication that CVE-2023-53012 is remotely exploitable, but local access may be required.
CVE-2023-53012 was disclosed as part of the continuous updates and maintenance of the Linux kernel.