thermal/drivers/rcar: Fix error checking in probe() (Linux Linux)
En bref
- Source
- NVD
- EPSS
- EPSS 0.21 % · centile 12 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- Linux
- Statut NVD
- Received
Rechercher sur…
Description
In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/rcar: Fix error checking in probe() This code accidentally calls thermal_zone_device_enable() before checking whether thermal_zone_device_register_with_trips() failed. Move the call until later to avoid an error pointer dereference of "priv->zone". The driver works differently depending on if we are using OF thermal or not. We use thermal_add_hwmon_sysfs() if we are using OF thermal and call thermal_zone_device_enable() if not. We can share same error check for if either of these fail. Moving the thermal_zone_device_enable() call is a bit cleaner as well. The original code used a three step process to cleanup: 1. Call thermal_zone_device_unregister() to cleanup. 2. Set priv->zone to an error pointer to preserve the error code. 3. Set priv->zone to NULL to avoid a second call to thermal_zone_device_unregister() in the rcar_thermal_remove() function. Now we can just do a direct goto error_unregister and rcar_thermal_remove() handles the cleanup properly.
Références
- https://git.kernel.org/stable/c/a85bcd0c7ef66e3404b3c99e5589c5ea622a757e
- https://git.kernel.org/stable/c/810875c5996f731961fc5ee1bd24e711f2e8fe78
- https://git.kernel.org/stable/c/623349a18d4c6e6add7876553c0cb6947c8d92e6
- https://git.kernel.org/stable/c/35bf61798e7d4abf39667d98f298f793b3dd9bbe
- https://git.kernel.org/stable/c/d67607e7749527850619a10d3ed033b02dcea516
- https://git.kernel.org/stable/c/dd04ad1cdabcad51e34b74b4e91b9aeb7180d05d
Références européennes
- ENISA EUVD · EUVD-2026-82250
- GCVE · GCVE-0-2026-93142
Avis du CERT-FR
- CERTFR-2026-AVI-1385 — Multiples vulnérabilités dans les produits VMware · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1375 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1289 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1253 — Multiples vulnérabilités dans le noyau Linux de Debian · cert.ssi.gouv.fr
Produits affectés
| Produit | Versions |
|---|---|
| Linux · Linux | affected bbcf90c0646ac797700269fa6645a6a46466c79f < a85bcd0c7ef66e3404b3c99e5589c5ea622a757e ; affected bbcf90c0646ac797700269fa6645a6a46466c79f < 810875c5996f731961fc5ee1bd24e711f2e8fe78 ; affected bbcf90c0646ac797700269fa6645a6a46466c79f < 623349a18d4c6e6add7876553c0cb6947c8d92e6 ; affected bbcf90c0646ac797700269fa6645a6a46466c79f < 35bf61798e7d4abf39667d98f298f793b3dd9bbe ; affected bbcf90c0646ac797700269fa6645a6a46466c79f < d67607e7749527850619a10d3ed033b02dcea516 ; affected bbcf90c0646ac797700269fa6645a6a46466c79f < dd04ad1cdabcad51e34b74b4e91b9aeb7180d05d |
| Linux · Linux | affected 5.9 ; unaffected 0 < 5.9 ; unaffected 6.1.188 ≤ 6.1.* ; unaffected 6.6.157 ≤ 6.6.* ; unaffected 6.12.110 ≤ 6.12.* ; unaffected 6.18.52 ≤ 6.18.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |