CVE-2026-45925

Source
https://cve.org/CVERecord?id=CVE-2026-45925
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-45925.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-45925
Downstream
BELL (1)
DEBIAN (1)
openSUSE (1)
SUSE (5)
UBUNTU (1)
Related
Published
2026-05-27T12:17:43Z
Modified
2026-10-08T02:50:55Z
Summary
thermal/of: Fix reference leak in thermal_of_cm_lookup()
Details

In the Linux kernel, the following vulnerability has been resolved:

thermal/of: Fix reference leak in thermal_of_cm_lookup()

In thermal_of_cm_lookup(), tr_np is obtained via of_parse_phandle(), but never released.

Use the __free(device_node) cleanup attribute to automatically release the node and fix the leak.

[ rjw: Changelog edits ]

Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/45xxx/CVE-2026-45925.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
e11df3bffde16fd3b6843aadfb921b5be0f8b55a
Fixed
8af710156c53cdb392d529497ef2b3a10a1f9370
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
423de5b5bc5b267586b449abd1c4fde562aa0cf9
Fixed
8344d5da9df74fdbef676214d0c482fc822a01ca
Fixed
025796ccd7f9f2e013e12319de26b6c021a80c1f
Fixed
a1fe789a96fe47733c133134fd264cb7ca832395
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6.12.18
Fixed
6.12.75
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6.13.6
Fixed
6.14
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
a1e9e19a70eed67a69ca697368739ea1a3ba5780

Affected versions

v6.*
v6.12.18
v6.12.19
v6.12.20
v6.12.21
v6.12.22
v6.12.23
v6.12.24
v6.12.25
v6.12.26
v6.12.27
v6.12.28
v6.12.29
v6.12.30
v6.12.31
v6.12.32
v6.12.33
v6.12.34
v6.12.35
v6.12.36
v6.12.37
v6.12.38
v6.12.39
v6.12.40
v6.12.41
v6.12.42
v6.12.43
v6.12.44
v6.12.45
v6.12.46
v6.12.47
v6.12.48
v6.12.49
v6.12.50
v6.12.51
v6.12.52
v6.12.53
v6.12.54
v6.12.55
v6.12.56
v6.12.57
v6.12.58
v6.12.59
v6.12.60
v6.12.61
v6.12.62
v6.12.63
v6.12.64
v6.12.65
v6.12.66
v6.12.67
v6.12.68
v6.12.69
v6.12.70
v6.12.71
v6.12.72
v6.12.73
v6.12.74
v6.13.10
v6.13.11
v6.13.12
v6.13.6
v6.13.7
v6.13.8
v6.13.9

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-45925.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.12.75
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.14
Type
ECOSYSTEM
Events
Introduced
6.14.0
Fixed
6.19.4

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-45925.json"