CVE-2026-45925

CVEs › CVE-2026-45925

Description

In the Linux kernel, the following vulnerability has been resolved: thermal/of: Fix reference leak in thermal_of_cm_lookup() In thermal_of_cm_lookup(), tr_np is obtained via of_parse_phandle(), but never released. Use the __free(device_node) cleanup attribute to automatically release the node and fix the leak. [ rjw: Changelog edits ]

Overview

State: PUBLISHED
Assigner (CNA): Linux
CVSS severity: high
CVSS score: 7.1 / 10
CVSS vector: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Effective score: 7.1 / 10 HIGH source: CNA overview
CWE(s): —
Reserved: 2026-05-13
Published: 2026-05-27 12:17 UTC
Last updated: 2026-05-27 12:17 UTC
Source: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45925.json
Linked Threat: CVE-2026-45925 — CVE-2026-45925

NVD triage scoring NVD CVE 2.0

Layer NVD adds on top of the CNA's CVE record — published / last-modified timestamps, exploitability / impact subscores, and the FIRST.org EPSS probability that this CVE will be exploited in the wild in the next 30 days.

NVD published: 2026-05-27 14:17:08 UTC
NVD last modified: 2026-06-25 12:40:42 UTC
NVD CVSS v3.1: 5.5 / 10 MEDIUM source: nvd@nist.gov
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Exploitability subscore: 1.8 / 10
Impact subscore: 3.6 / 10
EPSS score: 0.0015 (probability of exploitation in next 30 days)
EPSS percentile: 5.08% vs all CVEs — higher = more likely to be exploited, as of 2026-07-16

NVD / KEV / EPSS data refreshed 2026-07-17 04:04 UTC. Re-run the 🛰 Backfill from NVD button above to refresh.

European Union Vulnerability Database ENISA EUVD

ENISA's official EU repository for curated vulnerability intelligence. Carries a separate identifier (EUVD-YYYY-NNNN) and frequently exposes an earlier-published description + CVSS than NVD does.

EUVD ID: EUVD-2026-32391
Assigner: Linux
Published: May 27, 2026, 12:17:43 PM
Updated: May 27, 2026, 12:17:43 PM
EUVD base score: 0.0 / 10
EUVD-reported EPSS: 0.1600
Vendors: Linux
Products: Linux (423de5b5bc5b267586b449abd1c4fde562aa0cf9 <8344d5da9df74fdbef676214d0c482fc822a01ca)

Linux (patch: 6.19.4)

Linux (patch: 6.18.14)

Linux (6.12.18 <6.12.75)

Linux (423de5b5bc5b267586b449abd1c4fde562aa0cf9 <a1fe789a96fe47733c133134fd264cb7ca832395)

Linux (e11df3bffde16fd3b6843aadfb921b5be0f8b55a <8af710156c53cdb392d529497ef2b3a10a1f9370)

Linux (patch: 7.0)

Linux (6.13.6 <6.14)

Linux (a1e9e19a70eed67a69ca697368739ea1a3ba5780)

Linux (423de5b5bc5b267586b449abd1c4fde562aa0cf9 <025796ccd7f9f2e013e12319de26b6c021a80c1f)

Linux (patch: 0)

Linux (6.14)

Linux (patch: 6.12.75)
Aliases: GHSA-qjmr-5q33-8r6q

ENISA description: In the Linux kernel, the following vulnerability has been resolved: thermal/of: Fix reference leak in thermal_of_cm_lookup() In thermal_of_cm_lookup(), tr_np is obtained via of_parse_phandle(), but never released. Use the __free(device_node) cleanup attribute to automatically release the node and fix the leak. [ rjw: Changelog edits ]

EUVD references (4)

Affected products (2)

Vendor	Product	Versions	Platforms
Linux	Linux	`e11df3bffde16fd3b6843aadfb921b5be0f8b55a` (affected), `423de5b5bc5b267586b449abd1c4fde562aa0cf9` (affected), `423de5b5bc5b267586b449abd1c4fde562aa0cf9` (affected), `423de5b5bc5b267586b449abd1c4fde562aa0cf9` (affected), `a1e9e19a70eed67a69ca697368739ea1a3ba5780` (affected), `6.12.18` (affected), `6.13.6` (affected)	—
Linux	Linux	`6.14` (affected), `0` (unaffected), `6.12.75` (unaffected), `6.18.14` (unaffected), `6.19.4` (unaffected), `7.0` (unaffected)	—

Affected products — CPE 2.3 (5) NVD

NVD's normalized CPE 2.3 matchers, used by vendor tools (vulnerability scanners, asset managers) for automated detection. Compare with the CNA's free-text "Affected products" section above.

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc7:*:*:*:*:*:*

Vendor references (4)

References embedded in the original CVE record by the assigning CNA.

Web references (7)

DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.

https://git.kernel.org/stable/c/025796ccd7f9f2e013e12319de26b6c021a80c1f tenable:git.kernel.org
https://git.kernel.org/stable/c/8344d5da9df74fdbef676214d0c482fc822a01ca tenable:git.kernel.org
https://git.kernel.org/stable/c/8af710156c53cdb392d529497ef2b3a10a1f9370 tenable:git.kernel.org
https://git.kernel.org/stable/c/a1fe789a96fe47733c133134fd264cb7ca832395 tenable:git.kernel.org
https://nvd.nist.gov/vuln/detail/CVE-2026-45925 tenable:nvd.nist.gov
https://www.cve.org/CVERecord?id=CVE-2026-45925 tenable:www.cve.org
https://www.first.org/epss/ tenable:www.first.org

NVD-tagged references (4)

Reference list NVD curates from the CNA record, vendor advisories, and third-party reports. The tag chips below are NVD's analyst-assigned categories.

https://git.kernel.org/stable/c/025796ccd7f9f2e013e12319de26b6c021a80c1f 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Patch
https://git.kernel.org/stable/c/8344d5da9df74fdbef676214d0c482fc822a01ca 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Patch
https://git.kernel.org/stable/c/8af710156c53cdb392d529497ef2b3a10a1f9370 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Patch
https://git.kernel.org/stable/c/a1fe789a96fe47733c133134fd264cb7ca832395 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Patch

Remediations (18)

Remediations are stored against the linked Threat row; the list below is deduplicated across both pages.

Mitigate RedSun Zero-Day Without A Patch | Qualys

web:blog.qualys.com

Key Takeaways RedSun is a critical zero-day vulnerability in Microsoft Defender that allows low-privileged users to gain SYSTEM access No patch is currently available, leaving all Defender-enabled Windows systems potentially exposed Qualys VMDR detects affected assets instantly (QID 92382) TruRisk™ Eliminate enables immediate mitigation , removing exploitability without waiting for a fix ...

2026-06-04 00:15 UTC
Patch Tuesday, April 2026 Edition - Krebs on Security

web:krebsonsecurity.com

For a clickable, per- patch breakdown, check out the SANS Internet Storm Center Patch Tuesday roundup. Running into problems applying any of these updates?

2026-06-04 00:15 UTC
Security Update Guide - Microsoft

web:portal.msrc.microsoft.com

The Security Update Guide provides information on the latest Microsoft security updates, helping users understand and address potential vulnerabilities effectively.

2026-06-04 00:15 UTC
Vulnerability Remediation vs Mitigation: Which Strategy Wins in ...

web:securityboulevard.com

Cybersecurity vulnerabilities pose significant risks to organizations in today's digital landscape. Left unaddressed, these vulnerabilities can lead to data breaches, financial losses, and reputational damage. Organizations must decide how to tackle vulnerabilities—through remediation , mitigation , or a combination of both. But which strategy is more effective? This blog explores the ...

2026-06-04 00:15 UTC
Landing Page | ServiceNow Common Vulnerabilities & Exposures (CVE ...

web:support.servicenow.com

Overview The advisories below document publicly disclosed Common Vulnerabilities and Exposures ( CVEs ) in the Now Platform by ServiceNow. Because ServiceNow uses various methods to communicate vulnerability information, patches, and other fixes, customers should review family, security patch , and hotfix release notes, which are available at https://docs.servicenow.com, for a complete list of ...

2026-06-04 00:15 UTC
A guide to vulnerability remediation vs mitigation | @Bugcrowd

web:www.bugcrowd.com

Vulnerability mitigation is typically considered a temporary or interim solution. While mitigation measures can reduce the immediate risk associated with vulnerabilities, they may not provide a permanent fix . Organizations should aim to prioritize and plan for complete vulnerability remediation whenever feasible and allocate resources accordingly.

2026-06-04 00:15 UTC
How To Mitigate The Microsoft Windows BitLocker YellowKey USB 0-Day

web:www.forbes.com

Following the release of a BitLocker zero-day security bypass by a disgruntled hacker, Microsoft has now offered mitigation advice until a patch is available.

2026-06-04 00:15 UTC
Oracle Critical Patch Update Advisory - April 2026

web:www.oracle.com

Customers are strongly advised to apply the April 2026 Critical Patch Update for Fusion Middleware products, which includes patches for this Alert as well as additional patches. Affected Products and Patch Information Security vulnerabilities addressed by this Critical Patch Update affect the products listed below.

2026-06-04 00:15 UTC
Vulnerability Remediation vs. Mitigation: What are the Differences ...

web:www.secure.com

Remediation fully removes a vulnerability by fixing its root cause — through a patch , code fix , or system replacement. Mitigation reduces the risk of exploitation without removing the flaw itself, using controls like network segmentation or access restrictions.

2026-06-04 00:15 UTC
Strategies for Improving Mitigation & Remediation - Vuln Management ...

web:www.zafran.io

Mitigation is the control implemented or the action taken to reduce the impact or likelihood of a vulnerability or exposure being exploited before a fix is available or applied. Remediation is the resolution of the vulnerability or exposure which is completed typically through applying patches, updates, or correcting misconfigurations.

2026-06-04 00:15 UTC
Microsoft and Adobe Patch Tuesday, May 2026 Security Update Review

web:blog.qualys.com

May 2026's Patch Tuesday arrives with Microsoft addressing a fresh set of vulnerabilities across its ecosystem, reinforcing the ongoing need for timely patching in an increasingly threat-heavy…

2026-06-19 02:27 UTC
Microsoft Confirms Defender RoguePlanet 0-Day Exploit and Working to ...

web:cybersecuritynews.com

Microsoft has officially acknowledged a critical zero-day vulnerability in Microsoft Defender, publicly dubbed "RoguePlanet," and confirmed it is actively developing a security patch to address the flaw.

2026-06-19 02:27 UTC
Microsoft Releases Mitigation for Windows BitLocker Security Bypass 0 ...

web:cybersecuritynews.com

No patch has been released yet; Microsoft has instead issued a multi-step manual mitigation guide while a formal security update is prepared. Windows BitLocker Security Bypass The vulnerability originates in WinRE's handling of the BootExecute registry value under HKLM\ControlSet001\Control\Session Manager.

2026-06-19 02:27 UTC
Security Update Guide - Microsoft Security Response Center

web:msrc.microsoft.com

Security Update Guide - Microsoft Security Response Center

2026-06-19 02:27 UTC
Microsoft is working on a patch for 'YellowKey ... - Computerworld

web:www.computerworld.com

Microsoft says it is considering a patch for a zero-day vulnerability, dubbed YellowKey, that allows attackers with access to a Windows device to bypass Bitlocker encryption protection and read ...

2026-06-19 02:27 UTC
May 2026 Patch Tuesday: Updates and Analysis | CrowdStrike

web:www.crowdstrike.com

Microsoft has released security updates for 130 vulnerabilities, including 30 critical, in its May 2026 Patch Tuesday rollout.

2026-06-19 02:27 UTC
Microsoft working on a fix for RoguePlanet, a flaw that grants full PC ...

web:www.malwarebytes.com

Microsoft says it's working on a fix for an unpatched Defender vulnerability that can give attackers the highest level of access on Windows.

2026-06-19 02:27 UTC
Patch Tuesday June 2026: Security Updates & CVE Analysis

web:zecurit.com

Get the complete breakdown of Microsoft's June 2026 Patch Tuesday. We analyze the latest security updates and all critical CVEs .

2026-06-19 02:27 UTC

AI Forensic Analysis

Only Available for Registered Users. Sign in to view.

Raw JSON

The full cvelistV5 record. Download as CVE-2026-45925.json.

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/thermal/thermal_of.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "8af710156c53cdb392d529497ef2b3a10a1f9370",
              "status": "affected",
              "version": "e11df3bffde16fd3b6843aadfb921b5be0f8b55a",
              "versionType": "git"
            },
            {
              "lessThan": "8344d5da9df74fdbef676214d0c482fc822a01ca",
              "status": "affected",
              "version": "423de5b5bc5b267586b449abd1c4fde562aa0cf9",
              "versionType": "git"
            },
            {
              "lessThan": "025796ccd7f9f2e013e12319de26b6c021a80c1f",
              "status": "affected",
              "version": "423de5b5bc5b267586b449abd1c4fde562aa0cf9",
              "versionType": "git"
            },
            {
              "lessThan": "a1fe789a96fe47733c133134fd264cb7ca832395",
              "status": "affected",
              "version": "423de5b5bc5b267586b449abd1c4fde562aa0cf9",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "a1e9e19a70eed67a69ca697368739ea1a3ba5780",
              "versionType": "git"
            },
            {
              "lessThan": "6.12.75",
              "status": "affected",
              "version": "6.12.18",
              "versionType": "semver"
            },
            {
              "lessThan": "6.14",
              "status": "affected",
              "version": "6.13.6",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/thermal/thermal_of.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.14"
            },
            {
              "lessThan": "6.14",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.75",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.14",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.19.*",
              "status": "unaffected",
              "version": "6.19.4",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.0",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.75",
                  "versionStartIncluding": "6.12.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.14",
                  "versionStartIncluding": "6.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.19.4",
                  "versionStartIncluding": "6.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0",
                  "versionStartIncluding": "6.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "6.13.6",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nthermal/of: Fix reference leak in thermal_of_cm_lookup()\n\nIn thermal_of_cm_lookup(), tr_np is obtained via of_parse_phandle(), but\nnever released.\n\nUse the __free(device_node) cleanup attribute to automatically release\nthe node and fix the leak.\n\n[ rjw: Changelog edits ]"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-27T12:17:43.889Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/8af710156c53cdb392d529497ef2b3a10a1f9370"
        },
        {
          "url": "https://git.kernel.org/stable/c/8344d5da9df74fdbef676214d0c482fc822a01ca"
        },
        {
          "url": "https://git.kernel.org/stable/c/025796ccd7f9f2e013e12319de26b6c021a80c1f"
        },
        {
          "url": "https://git.kernel.org/stable/c/a1fe789a96fe47733c133134fd264cb7ca832395"
        }
      ],
      "title": "thermal/of: Fix reference leak in thermal_of_cm_lookup()",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-45925",
    "datePublished": "2026-05-27T12:17:43.889Z",
    "dateReserved": "2026-05-13T15:03:33.086Z",
    "dateUpdated": "2026-05-27T12:17:43.889Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}