CVE-2025-23136

Summary

In the Linux kernel, the following vulnerability has been resolved:

thermal: int340x: Add NULL check for adev

Not all devices have an ACPI companion fwnode, so adev might be NULL. This is similar to the commit cd2fd6eab480 ("platform/x86: int3472: Check for adev == NULL").

Add a check for adev not being set and return -ENODEV in that case to avoid a possible NULL pointer deref in int3402_thermal_probe().

Note, under the same directory, int3400_thermal_probe() has such a check.

[ rjw: Subject edit, added Fixes: ]

Affected Software

VendorProductVersion RangeStatus
LinuxLinux77e337c6e23e3b9d22e09ffec202a80f755a54c2 < d0d21c8e44216fa9afdb3809edf213f3c0a8c060affected
LinuxLinux77e337c6e23e3b9d22e09ffec202a80f755a54c2 < bc7b5f782d28942dbdfda70df30ce132694a06deaffected
LinuxLinux77e337c6e23e3b9d22e09ffec202a80f755a54c2 < 3155d5261b518776d1b807d9d922669991bbee56affected
LinuxLinux77e337c6e23e3b9d22e09ffec202a80f755a54c2 < 6a810c462f099353e908c70619638884cb82229caffected
LinuxLinux77e337c6e23e3b9d22e09ffec202a80f755a54c2 < ac2eb7378319e3836cdf3a2c15a0bdf04c50e81daffected
LinuxLinux77e337c6e23e3b9d22e09ffec202a80f755a54c2 < 953d28a4f459fcbde2d08f51aeca19d6b0f179f3affected
LinuxLinux77e337c6e23e3b9d22e09ffec202a80f755a54c2 < 0c49f12c77b77a706fd41370c11910635e491845affected
LinuxLinux77e337c6e23e3b9d22e09ffec202a80f755a54c2 < 8e8f1ddf4186731649df8bc9646017369eb19186affected
LinuxLinux77e337c6e23e3b9d22e09ffec202a80f755a54c2 < 2542a3f70e563a9e70e7ded314286535a3321bdbaffected
LinuxLinux3.18affected
LinuxLinux0 < 3.18unaffected
LinuxLinux5.4.292 <= 5.4.*unaffected
LinuxLinux5.10.236 <= 5.10.*unaffected
LinuxLinux5.15.180 <= 5.15.*unaffected
LinuxLinux6.1.134 <= 6.1.*unaffected
LinuxLinux6.6.87 <= 6.6.*unaffected
LinuxLinux6.12.23 <= 6.12.*unaffected
LinuxLinux6.13.11 <= 6.13.*unaffected
LinuxLinux6.14.2 <= 6.14.*unaffected
LinuxLinux6.15 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References