CVE Database
/

CVE-2024-50028

Back to search

CVE-2024-50028

Published: Oct 21, 2024

Modified: May 11, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: thermal: core: Reference count the zone in thermal_zone_get_by_id() There are places in the thermal netlink code where nothing prevents the thermal zone object from going away while being accessed after it has been returned by thermal_zone_get_by_id(). To address this, make thermal_zone_get_by_id() get a reference on the thermal zone device object to be returned with the help of get_device(), under thermal_list_lock, and adjust all of its callers to this change with the help of the cleanup.h infrastructure.

VendorProductVersions

Linux

Linux

affected
1ce50e7d408ef2bdc8ca021363fd46d1b8bfad00 - < c95538b286efc6109c987e97a051bc7844ede802
affected
1ce50e7d408ef2bdc8ca021363fd46d1b8bfad00 - < a42a5839f400e929c489bb1b58f54596c4535167

Linux

Linux

affected
5.9
unaffected
0 - < 5.9
unaffected
6.11.4 - <= 6.11.*
unaffected
6.12 - <= *

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now