CVE-2026-43332: thermal: core: Fix thermal zone device registration error path
In the Linux kernel, the following vulnerability has been resolved:
thermal: core: Fix thermal zone device registration error path
If thermalzonedeviceregisterwithtrips() fails after registering a thermal zone device, it needs to wait for the tz->removal completion like thermalzonedeviceunregister(), in case user space has managed to take a reference to the thermal zone device's kobject, in which case thermalrelease() may not be called by the error path itself and tz may be freed prematurely.
Add the missing waitforcompletion() call to the thermal zone device registration error path.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-43332?
CVE-2026-43332 has a severity rating that reflects its potential impact on system stability and security within the Linux kernel.
How do I fix CVE-2026-43332?
To fix CVE-2026-43332, ensure that you apply the latest patches or updates provided for the Linux kernel that address this vulnerability.
What systems are affected by CVE-2026-43332?
CVE-2026-43332 affects all systems running the Linux kernel that use thermal zone device functionality.
What causes the CVE-2026-43332 vulnerability?
CVE-2026-43332 is caused by improper error handling during the registration of thermal zone devices in the Linux kernel.
Is there a workaround for CVE-2026-43332?
While the best solution for CVE-2026-43332 is to update the kernel, there are no officially recommended workarounds available.