{"id":"CVE-2026-45925","title":"thermal/of: Fix reference leak in thermal_of_cm_lookup()","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nthermal/of: Fix reference leak in thermal_of_cm_lookup()\n\nIn thermal_of_cm_lookup(), tr_np is obtained via of_parse_phandle(), but\nnever released.\n\nUse the __free(devic…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= e11df3bffde16fd3b6843aadfb921b5be0f8b55a < 8af710156c53cdb392d529497ef2b3a10a1f9370","Linux >= 423de5b5bc5b267586b449abd1c4fde562aa0cf9 < 8344d5da9df74fdbef676214d0c482fc822a01ca","Linux >= 423de5b5bc5b267586b449abd1c4fde562aa0cf9 < 025796ccd7f9f2e013e12319de26b6c021a80c1f","Linux >= 423de5b5bc5b267586b449abd1c4fde562aa0cf9 < a1fe789a96fe47733c133134fd264cb7ca832395","Linux a1e9e19a70eed67a69ca697368739ea1a3ba5780","Linux >= 6.12.18 < 6.12.75","Linux >= 6.13.6 < 6.14","Linux 6.14"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-06T16:02:13.206359Z"},"published":"2026-05-27","updated":"2026-11-06","sourceUpdated":"2026-11-06T16:03:15.464Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-45925","references":[{"url":"https://git.kernel.org/stable/c/8af710156c53cdb392d529497ef2b3a10a1f9370"},{"url":"https://git.kernel.org/stable/c/8344d5da9df74fdbef676214d0c482fc822a01ca"},{"url":"https://git.kernel.org/stable/c/025796ccd7f9f2e013e12319de26b6c021a80c1f"},{"url":"https://git.kernel.org/stable/c/a1fe789a96fe47733c133134fd264cb7ca832395"}],"tags":["cve.org"],"epss":0.0016,"epssPercentile":0.05182,"ingestedAt":"2026-11-06T16:57:43.378Z","slug":"CVE-2026-45925","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nthermal/of: Fix reference leak in thermal_of_cm_lookup()\n\nIn thermal_of_cm_lookup(), tr_np is obtained via of_parse_phandle(), but\nnever released.\n\nUse the __free(device_node) cleanup attribute to automatically release\nthe node and fix the leak.\n\n[ rjw: Changelog edits ]\n\n## Affected\n\n- `Linux >= e11df3bffde16fd3b6843aadfb921b5be0f8b55a < 8af710156c53cdb392d529497ef2b3a10a1f9370`\n- `Linux >= 423de5b5bc5b267586b449abd1c4fde562aa0cf9 < 8344d5da9df74fdbef676214d0c482fc822a01ca`\n- `Linux >= 423de5b5bc5b267586b449abd1c4fde562aa0cf9 < 025796ccd7f9f2e013e12319de26b6c021a80c1f`\n- `Linux >= 423de5b5bc5b267586b449abd1c4fde562aa0cf9 < a1fe789a96fe47733c133134fd264cb7ca832395`\n- `Linux a1e9e19a70eed67a69ca697368739ea1a3ba5780`\n- `Linux >= 6.12.18 < 6.12.75`\n- `Linux >= 6.13.6 < 6.14`\n- `Linux 6.14`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}