Lukasz Luba

**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** The issue is related to a NULL pointer dereference in the zone registration error path of the thermal core in the Linux kernel. If `device register()` in `thermal zone device register with trips()` returns an error, the `tz` variable is set to NULL and subsequently dereferenced in `kfree(tz->tzp)`. This problem arose from a commit intended to avoid a double-free after dropping the reference to the zone device, but it became redundant after another commit changed the behavior of `thermal zone device unregister()`. The vulnerability can be exploited by a remote attacker to cause a denial of service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** A slab out-of-bounds issue was found in the Linux kernel, specifically in the `thermal/drivers/cpufreq cooling` module. This issue is scanned by KASAN in `cpu power to freq()`. If power is limited below the power of OPP0 in the EM table, it will cause a slab out-of-bound issue with a negative array index. The issue is fixed by returning the lowest frequency if limited power cannot find a suitable OPP in the EM table. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.