---
id: CVE-2026-45925
title: 'thermal/of: Fix reference leak in thermal_of_cm_lookup()'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  thermal/of: Fix reference leak in thermal_of_cm_lookup()

  In thermal_of_cm_lookup(), tr_np is obtained via of_parse_phandle(), but
  never released.

  Use the __free(devic…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= e11df3bffde16fd3b6843aadfb921b5be0f8b55a <
    8af710156c53cdb392d529497ef2b3a10a1f9370
  - >-
    Linux >= 423de5b5bc5b267586b449abd1c4fde562aa0cf9 <
    8344d5da9df74fdbef676214d0c482fc822a01ca
  - >-
    Linux >= 423de5b5bc5b267586b449abd1c4fde562aa0cf9 <
    025796ccd7f9f2e013e12319de26b6c021a80c1f
  - >-
    Linux >= 423de5b5bc5b267586b449abd1c4fde562aa0cf9 <
    a1fe789a96fe47733c133134fd264cb7ca832395
  - Linux a1e9e19a70eed67a69ca697368739ea1a3ba5780
  - Linux >= 6.12.18 < 6.12.75
  - Linux >= 6.13.6 < 6.14
  - Linux 6.14
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-06T16:02:13.206359Z'
published: '2026-05-27'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T16:03:15.464Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-45925'
references:
  - url: 'https://git.kernel.org/stable/c/8af710156c53cdb392d529497ef2b3a10a1f9370'
  - url: 'https://git.kernel.org/stable/c/8344d5da9df74fdbef676214d0c482fc822a01ca'
  - url: 'https://git.kernel.org/stable/c/025796ccd7f9f2e013e12319de26b6c021a80c1f'
  - url: 'https://git.kernel.org/stable/c/a1fe789a96fe47733c133134fd264cb7ca832395'
tags:
  - cve.org
epss: 0.0016
epssPercentile: 0.05182
ingestedAt: '2026-11-06T16:57:43.378Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

thermal/of: Fix reference leak in thermal_of_cm_lookup()

In thermal_of_cm_lookup(), tr_np is obtained via of_parse_phandle(), but
never released.

Use the __free(device_node) cleanup attribute to automatically release
the node and fix the leak.

[ rjw: Changelog edits ]

## Affected

- `Linux >= e11df3bffde16fd3b6843aadfb921b5be0f8b55a < 8af710156c53cdb392d529497ef2b3a10a1f9370`
- `Linux >= 423de5b5bc5b267586b449abd1c4fde562aa0cf9 < 8344d5da9df74fdbef676214d0c482fc822a01ca`
- `Linux >= 423de5b5bc5b267586b449abd1c4fde562aa0cf9 < 025796ccd7f9f2e013e12319de26b6c021a80c1f`
- `Linux >= 423de5b5bc5b267586b449abd1c4fde562aa0cf9 < a1fe789a96fe47733c133134fd264cb7ca832395`
- `Linux a1e9e19a70eed67a69ca697368739ea1a3ba5780`
- `Linux >= 6.12.18 < 6.12.75`
- `Linux >= 6.13.6 < 6.14`
- `Linux 6.14`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.