PT-2025-16776 · Linux+7 · Linux Kernel+7

Published 2025-03-13 · Updated 2026-04-20 · CVE-2025-23136

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved. The issue is related to the thermal subsystem, specifically the int340x driver, where a NULL check for adev was added to prevent a possible NULL pointer dereference in int3402 thermal probe(). This is because not all devices have an ACPI companion fwnode, which could result in adev being NULL.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALT-PU-2025-12647

ALT-PU-2025-6382

ALT-PU-2025-6606

ALT-PU-2025-7195

BDU:2025-12167

CVE-2025-23136

DLA-4178-1

DLA-4193-1

DSA-5907-1

ECHO-5DF3-AAB9-71F2

MGASA-2025-0142

MGASA-2025-0146

OESA-2025-1446

OESA-2025-1450

OPENSUSE-SU-2025_01614-1

OPENSUSE-SU-2025_01707-1

SUSE-SU-2025:01614-1

SUSE-SU-2025:01707-1

SUSE-SU-2025:01919-1

SUSE-SU-2025:01951-1

SUSE-SU-2025:01964-1

SUSE-SU-2025:01967-1

SUSE-SU-2025:01972-1

SUSE-SU-2025:01983-1

SUSE-SU-2025:20343-1

SUSE-SU-2025:20344-1

SUSE-SU-2025:20354-1

SUSE-SU-2025:20355-1

SUSE-SU-2025_01614-1

SUSE-SU-2025_01707-1

SUSE-SU-2025_01951-1

SUSE-SU-2025_01964-1

SUSE-SU-2025_01967-1

SUSE-SU-2025_01972-1

SUSE-SU-2025_01983-1

USN-7585-1

USN-7585-2

USN-7585-3

USN-7585-4

USN-7585-5

USN-7585-6

USN-7585-7

USN-7591-1

USN-7591-2

USN-7591-3

USN-7591-4

USN-7591-5

USN-7591-6

USN-7592-1

USN-7593-1

USN-7594-1

USN-7594-2

USN-7594-3

USN-7597-1

USN-7597-2

USN-7598-1

USN-7602-1

USN-7605-1

USN-7605-2

USN-7606-1

USN-7628-1

USN-7640-1

USN-7655-1

USN-7835-1

USN-7835-2

USN-7835-3

USN-7835-4

USN-7835-5

USN-7835-6

USN-7887-1

USN-7887-2

USN-7940-1

USN-7940-2

Affected Products

Alt Linux

Astra Linux

Debian

Linuxmint

Linux Kernel

Red Os

Suse

Ubuntu

References · 2559

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/23xxx/CVE-2025-23136.json · Exploit
• https://ubuntu.com/security/CVE-2025-37880 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37828 · Vendor Advisory
• https://git.kernel.org/stable/c/3155d5261b518776d1b807d9d922669991bbee56 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-21780 · Security Note
• https://ubuntu.com/security/CVE-2025-37811 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7835-3 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21871 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37740 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37798 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-47211 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-23149 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7940-2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-21941 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-21927 · Security Note