CVE-2024-36956

thermal/debugfs: Free all thermal zone debug memory on zone removal

published May 30, 2024

CVSS
—
EPSS
0%
Percentile
8.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

thermal/debugfs: Free all thermal zone debug memory on zone removal

Because thermal_debug_tz_remove() does not free all memory allocated for

thermal zone diagnostics, some of that memory becomes unreachable after

freeing the thermal zone's struct thermal_debugfs object.

Address this by making thermal_debug_tz_remove() free all of the memory

in question.

Cc :6.8+ <[email protected]> # 6.8+

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00194 · 8.6th percentile
Published
2024-05-30T15:35Z
EPSS history
Timeline
  • 30 MAY 15:35Z
    thermal/debugfs: Free all thermal zone debug memory on zone removal
    cvelistv5