NetSight
IP …
medium5.5

CVE-2025-23136

In the Linux kernel, the following vulnerability has been resolved: thermal: int340x: Add NULL check for adev Not all devices have an ACPI companion fwnode, so…

Impact

In the Linux kernel, the following vulnerability has been resolved: thermal: int340x: Add NULL check for adev Not all devices have an ACPI companion fwnode, so adev might be NULL. This is similar to the commit cd2fd6eab480 ("platform/x86: int3472: Check for adev == NULL"). Add a check for adev not being set and return -ENODEV in that case to avoid a possible NULL pointer deref in int3402_thermal_probe(). Note, under the same directory, int3400_thermal_probe() has such a check. [ rjw: Subject edit, added Fixes: ]

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.18 before 5.4.292
from 5.5 before 5.10.236
from 5.11 before 5.15.180
from 5.16 before 6.1.134
from 6.2 before 6.6.87
from 6.7 before 6.12.23

Weakness classification

CWE-476

References