First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2026-45925

MediumCVSS 5.5/10Last modified Nov 6, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

thermal/of: Fix reference leak in thermal_of_cm_lookup()

In thermal_of_cm_lookup(), tr_np is obtained via of_parse_phandle(), but never released.

Use the __free(device_node) cleanup attribute to automatically release the node and fix the leak.

[ rjw: Changelog edits ]

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

Vendor	Product	Versions
Linux	Linux	>= e11df3bffde16fd3b6843aadfb921b5be0f8b55a, < 8af710156c53cdb392d529497ef2b3a10a1f9370; >= 423de5b5bc5b267586b449abd1c4fde562aa0cf9, < 8344d5da9df74fdbef676214d0c482fc822a01ca; >= 423de5b5bc5b267586b449abd1c4fde562aa0cf9, < 025796ccd7f9f2e013e12319de26b6c021a80c1f; >= 423de5b5bc5b267586b449abd1c4fde562aa0cf9, < a1fe789a96fe47733c133134fd264cb7ca832395; a1e9e19a70eed67a69ca697368739ea1a3ba5780; >= 6.12.18, < 6.12.75; >= 6.13.6, < 6.14
Linux	Linux	6.14

References

Timeline

Published: May 27, 2026
Last modified: Nov 6, 2026
NVD status: Undergoing Analysis

Related CVEs from 2026

CVE-2026-459265.5In the Linux kernel, the following vulnerability has been resolved: rust: pwm: Fix potential memory leak on init error When initializing a CVE-2026-459274.7In the Linux kernel, the following vulnerability has been resolved: bpf: Require frozen map for calculating map hash Currently, bpf_map_ge CVE-2026-459285.5In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Fix memory leak on codec_info allocation fai CVE-2026-459297.8In the Linux kernel, the following vulnerability has been resolved: ovpn: fix possible use-after-free in ovpn_net_xmit When building the s CVE-2026-45936.3A flaw has been found in erupts erupt bis 1.13.3. Affected by this vulnerability is the function EruptDataQuery of the file erupt-ai/src/mai CVE-2026-459305.5In the Linux kernel, the following vulnerability has been resolved: net: mctp: ensure our nlmsg responses are initialised Syed Faraz Abrar CVE-2026-459317.8In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Hold mm structure across iommu_sva_unbind_device() Some CVE-2026-459327.3In the Linux kernel, the following vulnerability has been resolved: bpf: Fix tcx/netkit detach permissions when prog fd isn't given This c CVE-2026-459337.8In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve id of register in sync_linked_regs() sync_linked_regs() CVE-2026-459345.5In the Linux kernel, the following vulnerability has been resolved: btrfs: fix EEXIST abort due to non-consecutive gaps in chunk allocation CVE-2026-459357.8In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix slab-out-of-bounds read in DeleteIndexEntryRoot In the 'CVE-2026-459367.8In the Linux kernel, the following vulnerability has been resolved: power: supply: goldfish: Fix use-after-free in power_supply_changed()

CVE-2026-45925: Medium severity, CVSS 5.5 | Vulnix