thermal/drivers/tegra/soctherma: Switch to devm cooling device registration

Summary

CVECVE-2026-97475
StatePUBLISHED
AssignerLinux
Source PriorityCVE Program / NVD first with legacy fallback
Published2026-09-24 17:17:24 UTC
Updated2026-10-03 11:17:57 UTC
DescriptionIn the Linux kernel, the following vulnerability has been resolved: thermal/drivers/tegra/soctherma: Switch to devm cooling device registration Use devm_thermal_of_cooling_device_register() to simplify resource management and avoid manual cleanup in error paths. As a side effect this change has the benefit of solving an existing issue. Before, the function tegra_soctherm_remove() only called debugfs_remove_recursive() and never called thermal_cooling_device_unregister() for any of the cooling devices registered here. After the driver removal, the thermal framework's cdev list would still hold references to thermal_cooling_device objects whose devdata pointer (ts) pointed to memory already freed by the platform device's devm cleanup. With this change, the cooling device is unregistered when the driver is removed, thus fixing the issue above.

Risk And Classification

EPSS: 0.001730000 probability, percentile 0.060250000 (date 2026-10-05)

Vendor Declared Affected Products

SourceVendorProductVersionPlatforms
CNA Linux Linux affected ce0dbf04f685d48ffdec64a17ebb4965f828c3ff 78a2ba09fd7501df09239c7e3c311c80c259ed31 git Not specified
CNA Linux Linux affected ce0dbf04f685d48ffdec64a17ebb4965f828c3ff 0c65f786a69402620306828aa19817fd71f37f4b git Not specified
CNA Linux Linux affected ce0dbf04f685d48ffdec64a17ebb4965f828c3ff e777ab46db8c2addffe801274d713252318ef750 git Not specified
CNA Linux Linux affected ce0dbf04f685d48ffdec64a17ebb4965f828c3ff a643ce49ddcdbdec173e7bbf4c32c897e0293ba9 git Not specified
CNA Linux Linux affected ce0dbf04f685d48ffdec64a17ebb4965f828c3ff 6f2a863e7e9adf6088fe644259576181e60ee5e5 git Not specified
CNA Linux Linux affected ce0dbf04f685d48ffdec64a17ebb4965f828c3ff deaeb7be8e6b04c8b71080acba1bd88698f56b1d git Not specified
CNA Linux Linux affected ce0dbf04f685d48ffdec64a17ebb4965f828c3ff ee126267bc04bfb03816ae9d71ca24c5bf99e739 git Not specified
CNA Linux Linux affected 4.9 Not specified
CNA Linux Linux unaffected 4.9 semver Not specified
CNA Linux Linux unaffected 5.10.271 5.10.* semver Not specified
CNA Linux Linux unaffected 5.15.222 5.15.* semver Not specified
CNA Linux Linux unaffected 6.1.189 6.1.* semver Not specified
CNA Linux Linux unaffected 6.6.158 6.6.* semver Not specified
CNA Linux Linux unaffected 6.12.111 6.12.* semver Not specified
CNA Linux Linux unaffected 6.18.53 6.18.* semver Not specified
CNA Linux Linux unaffected 7.2 * original_commit_for_fix Not specified

References

ReferenceSourceLinkTags
git.kernel.org/stable/c/deaeb7be8e6b04c8b71080acba1bd88698f56b1d 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/a643ce49ddcdbdec173e7bbf4c32c897e0293ba9 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/e777ab46db8c2addffe801274d713252318ef750 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/78a2ba09fd7501df09239c7e3c311c80c259ed31 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/0c65f786a69402620306828aa19817fd71f37f4b 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/ee126267bc04bfb03816ae9d71ca24c5bf99e739 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/6f2a863e7e9adf6088fe644259576181e60ee5e5 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
CVE Program record CVE.ORG www.cve.org canonical
NVD vulnerability detail NVD nvd.nist.gov canonical, analysis

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report