CVE-2026-46021
Gravedad CVSS v3.1:
MEDIA
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
27/05/2026
Última modificación:
19/06/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
thermal: core: Fix thermal zone governor cleanup issues<br />
<br />
If thermal_zone_device_register_with_trips() fails after adding<br />
a thermal governor to the thermal zone being registered, the<br />
governor is not removed from it as appropriate which may lead to<br />
a memory leak.<br />
<br />
In turn, thermal_zone_device_unregister() calls thermal_set_governor()<br />
without acquiring the thermal zone lock beforehand which may race with<br />
a governor update via sysfs and may lead to a use-after-free in that<br />
case.<br />
<br />
Address these issues by adding two thermal_set_governor() calls, one to<br />
thermal_release() to remove the governor from the given thermal zone,<br />
and one to the thermal zone registration error path to cover failures<br />
preceding the thermal zone device registration.
Impacto
Puntuación base 3.x
5.50
Gravedad 3.x
MEDIA
Productos y versiones vulnerables
| CPE | Desde | Hasta |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 4.2 (incluyendo) | 6.6.140 (excluyendo) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.7 (incluyendo) | 6.12.86 (excluyendo) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.13 (incluyendo) | 6.18.27 (excluyendo) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.19 (incluyendo) | 7.0.4 (excluyendo) |
Para consultar la lista completa de nombres de CPE con productos y versiones, ver esta página
Referencias a soluciones, herramientas e información
- https://git.kernel.org/stable/c/37a430a2d4e66ec8238da6c7f7e48809bf265e13
- https://git.kernel.org/stable/c/41ff66baf81c6541f4f985dd7eac4494d03d9440
- https://git.kernel.org/stable/c/64d4ebf91d082034bbc5ae3ba2d7fd800bc02d06
- https://git.kernel.org/stable/c/75f8f3c3e09122270986de9d7aa347d701676761
- https://git.kernel.org/stable/c/8e563d8db50f303171aceb79eec0807e7ba06951
- https://git.kernel.org/stable/c/a172fa18bc370b776ac1510abb0dcb50a7a35fac
- https://git.kernel.org/stable/c/d4eb861adde5ce22e459fbd29366f47bb2167977
- https://git.kernel.org/stable/c/f412e541d25a3dfaf3d53e012ade6ff03cae8a45



