CVE-2026-97475

Source
https://cve.org/CVERecord?id=CVE-2026-97475
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-97475.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-97475
Downstream
Published
2026-09-24T16:04:17Z
Modified
2026-10-05T02:31:02Z
Summary
thermal/drivers/tegra/soctherma: Switch to devm cooling device registration
Details

In the Linux kernel, the following vulnerability has been resolved:

thermal/drivers/tegra/soctherma: Switch to devm cooling device registration

Use devm_thermal_of_cooling_device_register() to simplify resource management and avoid manual cleanup in error paths.

As a side effect this change has the benefit of solving an existing issue. Before, the function tegra_soctherm_remove() only called debugfs_remove_recursive() and never called thermal_cooling_device_unregister() for any of the cooling devices registered here.

After the driver removal, the thermal framework's cdev list would still hold references to thermal_cooling_device objects whose devdata pointer (ts) pointed to memory already freed by the platform device's devm cleanup.

With this change, the cooling device is unregistered when the driver is removed, thus fixing the issue above.

Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97475.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
ce0dbf04f685d48ffdec64a17ebb4965f828c3ff
Fixed
78a2ba09fd7501df09239c7e3c311c80c259ed31
Fixed
0c65f786a69402620306828aa19817fd71f37f4b
Fixed
e777ab46db8c2addffe801274d713252318ef750
Fixed
a643ce49ddcdbdec173e7bbf4c32c897e0293ba9
Fixed
6f2a863e7e9adf6088fe644259576181e60ee5e5
Fixed
deaeb7be8e6b04c8b71080acba1bd88698f56b1d
Fixed
ee126267bc04bfb03816ae9d71ca24c5bf99e739

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-97475.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.9.0
Fixed
5.10.271
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.222
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.189
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.158
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.111
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.53

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-97475.json"