Log in Start free

Vulnerability · Published Apr 16, 2025 · Assigned by Linux

CVE-2025-23136thermal: int340x: Add NULL check for adev

Medium 5.5

In plain English

A medium-severity null pointer dereference in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 13% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)5.5Medium
Exploit odds (30 days)0.2%top 87.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: thermal: int340x: Add NULL check for adev Not all devices have an ACPI companion fwnode, so adev might be NULL. This is similar to the commit cd2fd6eab480 ("platform/x86: int3472: Check for adev == NULL"). Add a check for adev not being set and return -ENODEV in that case to avoid a possible NULL pointer deref in int3402_thermal_probe(). Note, under the same directory, int3400_thermal_probe() has such a check. [ rjw: Subject edit, added Fixes: ]

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.135-1DEBIAN-CVE-2025-23136
Debian:12linux6.1.135-1DSA-5907-1
Debian:13linux6.12.25-1DEBIAN-CVE-2025-23136
Debian:14linux6.12.25-1DEBIAN-CVE-2025-23136
Ubuntu:22.04:LTSlinux5.15.0-142.152UBUNTU-CVE-2025-23136
Ubuntu:24.04:LTSlinux6.8.0-86.87USN-7835-1
Ubuntu:24.04:LTSlinux6.8.0-86.87UBUNTU-CVE-2025-23136
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2025-23136
Ubuntu:22.04:LTSlinux-aws5.15.0-1086.93UBUNTU-CVE-2025-23136
Ubuntu:24.04:LTSlinux-aws6.8.0-1041.43UBUNTU-CVE-2025-23136
Ubuntu:24.04:LTSlinux-aws6.8.0-1041.43USN-7835-1
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2025-23136
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2025-23136
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2025-23136
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1041.43~22.04.1USN-7835-6
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1041.43~22.04.1UBUNTU-CVE-2025-23136
Ubuntu:22.04:LTSlinux-azure5.15.0-1091.100UBUNTU-CVE-2025-23136
Ubuntu:24.04:LTSlinux-azure6.8.0-1041.47USN-7835-1
Ubuntu:24.04:LTSlinux-azure6.8.0-1041.47UBUNTU-CVE-2025-23136
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2025-23136
Ubuntu:24.04:LTSlinux-azure-6.116.11.0-1018.18~24.04.1UBUNTU-CVE-2025-23136
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2025-23136
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2025-23136
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1041.47~22.04.1UBUNTU-CVE-2025-23136
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1041.47~22.04.1USN-7835-1
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1091.100.1UBUNTU-CVE-2025-23136
Ubuntu:25.10linux-azure-fdeno fix listedUBUNTU-CVE-2025-23136
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2025-23136
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2025-23136
Ubuntu:24.04:LTSlinux-azure-nvidia6.8.0-1029.32USN-7940-2
Ubuntu:24.04:LTSlinux-azure-nvidia6.8.0-1029.32UBUNTU-CVE-2025-23136
Ubuntu:22.04:LTSlinux-gcp5.15.0-1085.94UBUNTU-CVE-2025-23136
Ubuntu:24.04:LTSlinux-gcp6.8.0-1042.45UBUNTU-CVE-2025-23136
Ubuntu:24.04:LTSlinux-gcp6.8.0-1042.45USN-7835-1
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2025-23136
Ubuntu:24.04:LTSlinux-gcp-6.116.11.0-1016.16~24.04.1UBUNTU-CVE-2025-23136
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2025-23136
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2025-23136
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1042.45~22.04.1USN-7835-3
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1042.45~22.04.1UBUNTU-CVE-2025-23136
Ubuntu:22.04:LTSlinux-gke5.15.0-1083.89UBUNTU-CVE-2025-23136
Ubuntu:24.04:LTSlinux-gke6.8.0-1038.43USN-7835-3
Ubuntu:24.04:LTSlinux-gke6.8.0-1038.43UBUNTU-CVE-2025-23136
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1068.76UBUNTU-CVE-2025-23136
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1025.28UBUNTU-CVE-2025-23136
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1025.28USN-7835-1
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2025-23136
Ubuntu:24.04:LTSlinux-hwe-6.116.11.0-28.28~24.04.1UBUNTU-CVE-2025-23136
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2025-23136
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2025-23136
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-86.87~22.04.1UBUNTU-CVE-2025-23136
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-86.87~22.04.1USN-7835-4
Ubuntu:22.04:LTSlinux-ibm5.15.0-1078.81UBUNTU-CVE-2025-23136
Ubuntu:24.04:LTSlinux-ibm6.8.0-1039.39UBUNTU-CVE-2025-23136
Ubuntu:24.04:LTSlinux-ibm6.8.0-1039.39USN-7835-1
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1039.39~22.04.1USN-7835-1
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1039.39~22.04.1UBUNTU-CVE-2025-23136
Ubuntu:24.04:LTSlinux-intelno fix listedUBUNTU-CVE-2025-23136
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2025-23136
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1081.87UBUNTU-CVE-2025-23136
Ubuntu:22.04:LTSlinux-kvm5.15.0-1082.87UBUNTU-CVE-2025-23136
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-142.152UBUNTU-CVE-2025-23136
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-86.87.1UBUNTU-CVE-2025-23136
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-86.87.1USN-7835-1
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2025-23136
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.116.11.0-1015.16~24.04.2UBUNTU-CVE-2025-23136
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2025-23136
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2025-23136
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-86.87.1~22.04.1USN-7835-1
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-86.87.1~22.04.1UBUNTU-CVE-2025-23136
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1080.81UBUNTU-CVE-2025-23136
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1041.44UBUNTU-CVE-2025-23136
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1041.44USN-7835-3
Ubuntu:24.04:LTSlinux-nvidia-6.116.11.0-1012.12UBUNTU-CVE-2025-23136
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2025-23136
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2025-23136
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1041.44~22.04.2USN-7835-3
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1041.44~22.04.2UBUNTU-CVE-2025-23136
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1041.44.1USN-7835-3
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1041.44.1UBUNTU-CVE-2025-23136
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1039.39UBUNTU-CVE-2025-23136
Ubuntu:24.04:LTSlinux-nvidia-tegra6.8.0-1012.12UBUNTU-CVE-2025-23136
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1028.28UBUNTU-CVE-2025-23136
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2025-23136
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2025-23136
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2025-23136
Ubuntu:24.04:LTSlinux-oem-6.116.11.0-1024.24UBUNTU-CVE-2025-23136
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2025-23136
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2025-23136
Ubuntu:22.04:LTSlinux-oracle5.15.0-1083.89UBUNTU-CVE-2025-23136
Ubuntu:24.04:LTSlinux-oracle6.8.0-1038.39UBUNTU-CVE-2025-23136
Ubuntu:24.04:LTSlinux-oracle6.8.0-1038.39USN-7835-1
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2025-23136
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1038.39~22.04.1UBUNTU-CVE-2025-23136
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1038.39~22.04.1USN-7835-5
Ubuntu:22.04:LTSlinux-raspi5.15.0-1080.83UBUNTU-CVE-2025-23136
Ubuntu:24.04:LTSlinux-raspi6.8.0-1041.45USN-7887-2
Ubuntu:24.04:LTSlinux-raspi6.8.0-1041.45UBUNTU-CVE-2025-23136
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2025-23136
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-23136
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-23136
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-23136
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-23136
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2025-23136
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2025-23136
Ubuntu:22.04:LTSlinux-riscv-6.86.8.0-86.87~22.04.1UBUNTU-CVE-2025-23136
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2025-23136
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2025-23136
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2025-23136
Ubuntu:24.04:LTSlinux-xilinx6.8.0-1018.19UBUNTU-CVE-2025-23136
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1050.54UBUNTU-CVE-2025-23136

Affected products (as reported)

VendorProductVersions
Linux Linux 77e337c6e23e3b9d22e09ffec202a80f755a54c2 – before d0d21c8e44216fa9afdb3809edf213f3c0a8c06077e337c6e23e3b9d22e09ffec202a80f755a54c2 – before bc7b5f782d28942dbdfda70df30ce132694a06de77e337c6e23e3b9d22e09ffec202a80f755a54c2 – before 3155d5261b518776d1b807d9d922669991bbee5677e337c6e23e3b9d22e09ffec202a80f755a54c2 – before 6a810c462f099353e908c70619638884cb82229c77e337c6e23e3b9d22e09ffec202a80f755a54c2 – before ac2eb7378319e3836cdf3a2c15a0bdf04c50e81d77e337c6e23e3b9d22e09ffec202a80f755a54c2 – before 953d28a4f459fcbde2d08f51aeca19d6b0f179f377e337c6e23e3b9d22e09ffec202a80f755a54c2 – before 0c49f12c77b77a706fd41370c11910635e49184577e337c6e23e3b9d22e09ffec202a80f755a54c2 – before 8e8f1ddf4186731649df8bc9646017369eb19186
Linux Linux 3.18

Weakness: CWE-476 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References