CVE-2026-45925

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2026-05-27 Modified: 2026-11-06 First seen: 2026-11-06 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: thermal/of: Fix reference leak in thermal_of_cm_lookup() In thermal_of_cm_lookup(), tr_np is obtained via of_parse_phandle(), but never released. Use the __free(device_node) cleanup attribute to automatically release the node and fix the leak. [ rjw: Changelog edits ]

Affected Software (13)

VendorProductVersion
Linux Linux e11df3bffde16fd3b6843aadfb921b5be0f8b55a < 8af710156c53cdb392d529497ef2b3a10a1f9370
Linux Linux 423de5b5bc5b267586b449abd1c4fde562aa0cf9 < 8344d5da9df74fdbef676214d0c482fc822a01ca
Linux Linux 423de5b5bc5b267586b449abd1c4fde562aa0cf9 < 025796ccd7f9f2e013e12319de26b6c021a80c1f
Linux Linux 423de5b5bc5b267586b449abd1c4fde562aa0cf9 < a1fe789a96fe47733c133134fd264cb7ca832395
Linux Linux a1e9e19a70eed67a69ca697368739ea1a3ba5780
Linux Linux 6.12.18 < 6.12.75
Linux Linux 6.13.6 < 6.14
Linux Linux 6.14
linux linux_kernel 6.12.18 – 6.12.75
linux linux_kernel 6.14
linux linux_kernel 6.14
linux linux_kernel 6.14
linux linux_kernel 6.14

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.16%
Raw Score 0.001600
Percentile 5.2%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00160
2026-11-12
0.00160
2026-11-10
0.00160
2026-11-09
0.00160
2026-11-08
0.00160
2026-11-07
0.00160
2026-11-06
0.00160

Intelligence Sources

mitre ref →
nvd ref →