A use-after-free vulnerability within the Linux kernel thermal subsystem poses a severe risk of system compromise or denial of service.

This vulnerability is a use-after-free flaw introduced by the incorrect removal of a validation check in the thermal_add_hwmon_sysfs function. The vulnerability is triggered during the error path of the driver, and it does not require user authentication to exploit.

Successful exploitation of this use-after-free vulnerability can lead to critical impacts, including unauthorized privilege escalation, arbitrary code execution, or complete system crashes. Given the CVSS score of 8.4, this flaw is categorized as high severity because it enables local attackers to manipulate kernel memory, potentially leading to a total loss of confidentiality, integrity, and availability of the affected host.

Immediate Action: Update the Linux kernel to version 5.15.216, 6.1.183, 6.6.152, 6.12.104, or any subsequent stable release provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel oops, segmentation faults, or unexpected reboots that may indicate memory corruption events.

Compensating Controls: Restrict local access to the system to authorized personnel only, as the vulnerability requires local access to the affected hardware or environment to trigger the specific driver error path.

Public Exploit Available: No (exploit_available: unknown)

The Linux kernel remains a critical component of infrastructure security, and flaws involving memory management require prompt attention. Administrators should prioritize patching this vulnerability during the next scheduled maintenance window to prevent potential local exploitation. Verification of the kernel version post-update is essential to ensure the fix has been correctly applied.