VDB

CVE-2026-45925

CVE-2026-45925 PUBLISHED

Reported by Linux · Published May 27, 2026

In the Linux kernel, the following vulnerability has been resolved: thermal/of: Fix reference leak in thermal_of_cm_lookup() In thermal_of_cm_lookup(), tr_np is obtained via of_parse_phandle(), but never released. Use the __free(device_node) cleanup attribute to automatically release the node and fix the leak. [ rjw: Changelog edits ]

EPSS 0.02% · 6.8th percentile

Risk Scores

EPSS Score
0.02%
6.8th percentile

Affected Products

VendorProductVersions
LinuxLinuxe11df3bffde16fd3b6843aadfb921b5be0f8b55a, 423de5b5bc5b267586b449abd1c4fde562aa0cf9, 423de5b5bc5b267586b449abd1c4fde562aa0cf9
LinuxLinux6.14, 0, 6.12.75
LinuxLinux7.0, 6.14, 0
linuxlinux_kernel6.14, 6.14, 6.14

Timeline

  • May 27, 2026 CVE Published
  • May 28, 2026 EPSS Score
  • May 29, 2026 EPSS Score
  • May 29, 2026 Security Advisory
  • May 30, 2026 EPSS Score
  • May 31, 2026 EPSS Score
  • Jun 1, 2026 EPSS Score
  • Jun 4, 2026 Coalition ESS Score
  • Jun 5, 2026 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›