{"id":"CVE-2026-97475","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nthermal/drivers/tegra/soctherma: Switch to devm cooling device registration\n\nUse devm_thermal_of_cooling_device_register() to simplify resource\nmanagement and avoid man…","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nthermal/drivers/tegra/soctherma: Switch to devm cooling device registration\n\nUse devm_thermal_of_cooling_device_register() to simplify resource\nmanagement and avoid man…","severity":"medium","cvss":5.5,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-825"],"vendor":"Linux","product":"Linux","affected":["Linux >= ce0dbf04f685d48ffdec64a17ebb4965f828c3ff < 78a2ba09fd7501df09239c7e3c311c80c259ed31","Linux >= ce0dbf04f685d48ffdec64a17ebb4965f828c3ff < 0c65f786a69402620306828aa19817fd71f37f4b","Linux >= ce0dbf04f685d48ffdec64a17ebb4965f828c3ff < e777ab46db8c2addffe801274d713252318ef750","Linux >= ce0dbf04f685d48ffdec64a17ebb4965f828c3ff < a643ce49ddcdbdec173e7bbf4c32c897e0293ba9","Linux >= ce0dbf04f685d48ffdec64a17ebb4965f828c3ff < 6f2a863e7e9adf6088fe644259576181e60ee5e5","Linux >= ce0dbf04f685d48ffdec64a17ebb4965f828c3ff < deaeb7be8e6b04c8b71080acba1bd88698f56b1d","Linux >= ce0dbf04f685d48ffdec64a17ebb4965f828c3ff < ee126267bc04bfb03816ae9d71ca24c5bf99e739","Linux 4.9"],"published":"2026-09-24","updated":"2026-10-03","sourceUpdated":"2026-10-03T11:17:57.737","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-97475","references":[{"url":"https://git.kernel.org/stable/c/0c65f786a69402620306828aa19817fd71f37f4b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/6f2a863e7e9adf6088fe644259576181e60ee5e5","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/78a2ba09fd7501df09239c7e3c311c80c259ed31","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/a643ce49ddcdbdec173e7bbf4c32c897e0293ba9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/deaeb7be8e6b04c8b71080acba1bd88698f56b1d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/e777ab46db8c2addffe801274d713252318ef750","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/ee126267bc04bfb03816ae9d71ca24c5bf99e739","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97475.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-97475"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2540487"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-97475"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97475"},{"url":"https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-97475.mbox"}],"tags":["nvd","cve.org","csaf","vex","red-hat"],"epss":0.00173,"epssPercentile":0.06647,"cvssSource":"vendor","ingestedAt":"2026-09-24T16:47:15.872Z","slug":"CVE-2026-97475","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nthermal/drivers/tegra/soctherma: Switch to devm cooling device registration\n\nUse devm_thermal_of_cooling_device_register() to simplify resource\nmanagement and avoid manual cleanup in error paths.\n\nAs a side effect this change has the benefit of solving an existing\nissue. Before, the function tegra_soctherm_remove() only called\ndebugfs_remove_recursive() and never called thermal_cooling_device_unregister()\nfor any of the cooling devices registered here.\n\nAfter the driver removal, the thermal framework's cdev list would\nstill hold references to thermal_cooling_device objects whose devdata\npointer (ts) pointed to memory already freed by the platform device's\ndevm cleanup.\n\nWith this change, the cooling device is unregistered when the driver\nis removed, thus fixing the issue above.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n## Vendor advisories\n\n- **Red Hat VEX** · Moderate · affected: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4 · no fix planned: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4 · updated 2026-10-17 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97475.json)","depth":"sunlit","depthScore":30,"depthScoreParts":{"impact":30.3,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":213493,"id":"CVE-2026-97475","ts":1790754739489,"field":"cvss","old":null,"new":"5.5"},{"seq":213492,"id":"CVE-2026-97475","ts":1790754739489,"field":"severity","old":"none","new":"medium"}]}