CVE-2026-45925: thermal/of: Fix reference leak in thermal_of_cm_lookup()
Published May 27, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
thermal/of: Fix reference leak in thermalofcmlookup()
In thermalofcmlookup(), trnp is obtained via ofparsephandle(), but never released.
Use the free(devicenode) cleanup attribute to automatically release the node and fix the leak.
[ rjw: Changelog edits ]
Affected Software
9 affected components
Linux Linux kernel
Linux Linux kernel>=6.12.18<6.12.75
Linux Linux kernel>=6.13.6<6.14
Linux Linux kernel>=6.14.1<6.18.14
Linux Linux kernel>=6.19<6.19.4
Linux Linux kernel=6.14
Linux Linux kernel=6.14-rc5
Linux Linux kernel=6.14-rc6
Linux Linux kernel=6.14-rc7
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Upgrade the Linux kernel to the version that includes the fix “thermal/of: Fix reference leak in thermal_of_cm_lookup()” (addresses the missing __free(device_node) cleanup attribute to prevent the of_parse_phandle() reference leak).
Event History
May 27, 2026
CVE Published
via MITRE·12:17 PM
Data Sourced
via MITRE·12:17 PM
Description
Data Sourced
via NVD·02:17 PM
RemedyDescriptionSeverityAffected Software