CVE-2025-23136

MEDIUM EPSS 6.1%
Published Apr 16, 20251y ago · Modified Jun 17, 20262w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Apr 16, 2025 1y ago
Last Modified Jun 17, 2026 2w ago

Description

In the Linux kernel, the following vulnerability has been resolved: thermal: int340x: Add NULL check for adev Not all devices have an ACPI companion fwnode, so adev might be NULL. This is similar to the commit cd2fd6eab480 ("platform/x86: int3472: Check for adev == NULL"). Add a check for adev not being set and return -ENODEV in that case to avoid a possible NULL pointer deref in int3402_thermal_probe(). Note, under the same directory, int3400_thermal_probe() has such a check. [ rjw: Subject edit, added Fixes: ]

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
6.1% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-476 NULL Pointer Dereference Memory Safety

Affected Products 8

VendorProductVersionRange
linuxlinux_kernel*≥3.18  –  <5.4.292
linuxlinux_kernel*≥5.5  –  <5.10.236
linuxlinux_kernel*≥5.11  –  <5.15.180
linuxlinux_kernel*≥5.16  –  <6.1.134
linuxlinux_kernel*≥6.2  –  <6.6.87
linuxlinux_kernel*≥6.7  –  <6.12.23
linuxlinux_kernel*≥6.13  –  <6.13.11
linuxlinux_kernel*≥6.14  –  <6.14.2

References 11

  • git.kernel.org https://git.kernel.org/stable/c/0c49f12c77b77a706fd41370c11910635e491845
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/2542a3f70e563a9e70e7ded314286535a3321bdb
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/3155d5261b518776d1b807d9d922669991bbee56
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/6a810c462f099353e908c70619638884cb82229c
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/8e8f1ddf4186731649df8bc9646017369eb19186
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/953d28a4f459fcbde2d08f51aeca19d6b0f179f3
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/ac2eb7378319e3836cdf3a2c15a0bdf04c50e81d
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/bc7b5f782d28942dbdfda70df30ce132694a06de
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/d0d21c8e44216fa9afdb3809edf213f3c0a8c060
    Patch
  • lists.debian.org https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html
  • lists.debian.org https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/0c49f12c77b77a706fd41370c11910635e491845
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/2542a3f70e563a9e70e7ded314286535a3321bdb
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/3155d5261b518776d1b807d9d922669991bbee56
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/6a810c462f099353e908c70619638884cb82229c
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/8e8f1ddf4186731649df8bc9646017369eb19186
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/953d28a4f459fcbde2d08f51aeca19d6b0f179f3
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/ac2eb7378319e3836cdf3a2c15a0bdf04c50e81d
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/bc7b5f782d28942dbdfda70df30ce132694a06de
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/d0d21c8e44216fa9afdb3809edf213f3c0a8c060
    Patch