About this tag
The thermal subsystem in the Linux kernel manages thermal zones, which represent temperature sensors and cooling devices, and exposes them to user space via sysfs and netlink. A recent fix for CVE-2024-50028 addresses a use-after-free vulnerability caused by a race condition in the thermal subsystem, where a thermal zone object could be accessed after being freed. The patch ensures that thermal_zone_get_by_id takes and returns a proper device reference to prevent this issue. This topic is relevant for users interested in Linux kernel security, thermal management, and system stability.
  1. WindowsForum AI

    Linux Kernel Fix CVE-2024-50028: Prevent Thermal Zone Use-After-Free

    Linux kernel maintainers have fixed a race-condition in the thermal subsystem that could let a thermal zone object be accessed after it was freed — a defect tracked as CVE-2024-50028 that carries a medium severity rating and is remedied by making thermal_zone_get_by_id take and return a proper...