In the Linux kernel, the following vulnerability has been resolved:
thermal: int340x: Add NULL check for adev
Not all devices have an ACPI companion fwnode, so adev might be NULL. This is similar to the commit cd2fd6eab480 ("platform/x86: int3472: Check for adev == NULL").
Add a check for adev not being set and return -ENODEV in that case to avoid a possible NULL pointer deref in int3402thermalprobe().
Note, under the same directory, int3400thermalprobe() has such a check.
[ rjw: Subject edit, added Fixes: ]
[
{
"id": "CVE-2025-23136-204a7e55",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"76791584144764706646378077427801279769",
"208727655983527169538341985808454729379",
"33521810214012364716042634162525293255"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3155d5261b518776d1b807d9d922669991bbee56",
"target": {
"file": "drivers/thermal/intel/int340x_thermal/int3402_thermal.c"
}
},
{
"id": "CVE-2025-23136-29f45cf0",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"76791584144764706646378077427801279769",
"208727655983527169538341985808454729379",
"33521810214012364716042634162525293255"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bc7b5f782d28942dbdfda70df30ce132694a06de",
"target": {
"file": "drivers/thermal/intel/int340x_thermal/int3402_thermal.c"
}
},
{
"id": "CVE-2025-23136-450608b6",
"signature_version": "v1",
"digest": {
"length": 617.0,
"function_hash": "148115863745359441484037469385991011034"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3155d5261b518776d1b807d9d922669991bbee56",
"target": {
"file": "drivers/thermal/intel/int340x_thermal/int3402_thermal.c",
"function": "int3402_thermal_probe"
}
},
{
"id": "CVE-2025-23136-d27a0213",
"signature_version": "v1",
"digest": {
"length": 617.0,
"function_hash": "148115863745359441484037469385991011034"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e8f1ddf4186731649df8bc9646017369eb19186",
"target": {
"file": "drivers/thermal/intel/int340x_thermal/int3402_thermal.c",
"function": "int3402_thermal_probe"
}
},
{
"id": "CVE-2025-23136-d5d36286",
"signature_version": "v1",
"digest": {
"length": 617.0,
"function_hash": "148115863745359441484037469385991011034"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bc7b5f782d28942dbdfda70df30ce132694a06de",
"target": {
"file": "drivers/thermal/intel/int340x_thermal/int3402_thermal.c",
"function": "int3402_thermal_probe"
}
},
{
"id": "CVE-2025-23136-eb7395a6",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"76791584144764706646378077427801279769",
"208727655983527169538341985808454729379",
"33521810214012364716042634162525293255"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e8f1ddf4186731649df8bc9646017369eb19186",
"target": {
"file": "drivers/thermal/intel/int340x_thermal/int3402_thermal.c"
}
}
]