PT-2026-43888 · Linux · Linux

Published 2026-05-27 · Updated 2026-05-27 · CVE-2026-46021

Mitre

In the Linux kernel, the following vulnerability has been resolved:

thermal: core: Fix thermal zone governor cleanup issues

If thermal zone device register with trips() fails after adding a thermal governor to the thermal zone being registered, the governor is not removed from it as appropriate which may lead to a memory leak.

In turn, thermal zone device unregister() calls thermal set governor() without acquiring the thermal zone lock beforehand which may race with a governor update via sysfs and may lead to a use-after-free in that case.

Address these issues by adding two thermal set governor() calls, one to thermal release() to remove the governor from the given thermal zone, and one to the thermal zone registration error path to cover failures preceding the thermal zone device registration.

Related Identifiers

CVE-2026-46021

Affected Products

Linux

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-46021 · Security Note
• https://git.kernel.org/stable/c/41ff66baf81c6541f4f985dd7eac4494d03d9440 · Note
• https://git.kernel.org/stable/c/f412e541d25a3dfaf3d53e012ade6ff03cae8a45 · Note
• https://git.kernel.org/stable/c/37a430a2d4e66ec8238da6c7f7e48809bf265e13 · Note
• https://git.kernel.org/stable/c/75f8f3c3e09122270986de9d7aa347d701676761 · Note
• https://git.kernel.org/stable/c/64d4ebf91d082034bbc5ae3ba2d7fd800bc02d06 · Note