{"id":25999,"date":"2026-09-18T04:32:12","date_gmt":"2026-09-17T20:32:12","guid":{"rendered":"https:\/\/www.54iter.cn\/?vuln=cve-2026-93142"},"modified":"2026-09-18T04:32:12","modified_gmt":"2026-09-17T20:32:12","slug":"cve-2026-93142","status":"publish","type":"vuln","link":"https:\/\/www.54iter.cn\/?vuln=cve-2026-93142","title":{"rendered":"CVE-2026-93142 &#8211; In the Linux kernel, the following vulnerability has been resolved:\n\nthermal\/drivers\/rcar:"},"content":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>thermal\/drivers\/rcar: Fix error checking in probe()<\/p>\n<p>This code accidentally calls thermal_zone_device_enable() before checking<br \/>\nwhether thermal_zone_device_register_with_trips() failed.  Move the call<br \/>\nuntil later to avoid an error pointer dereference of &#8220;priv-&gt;zone&#8221;.<\/p>\n<p>The driver works differently depending on if we are using OF thermal or<br \/>\nnot.  We use thermal_add_hwmon_sysfs() if we are using OF thermal and<br \/>\ncall thermal_zone_device_enable() if not.  We can share same error check<br \/>\nfor if either of these fail.<\/p>\n<p>Moving the thermal_zone_device_enable() call is a bit cleaner as well.<br \/>\nThe original code used a three step process to cleanup:<br \/>\n1. Call thermal_zone_device_unregister() to cleanup.<br \/>\n2. Set priv-&gt;zone to an error pointer to preserve the error code.<br \/>\n3. Set priv-&gt;zone to NULL to avoid a second call to<br \/>\n   thermal_zone_device_unregister() in the rcar_thermal_remove()<br \/>\n   function.<\/p>\n<p>Now we can just do a direct goto error_unregister and rcar_thermal_remove()<br \/>\nhandles the cleanup properly.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>thermal\/drivers\/rcar: Fix error checking in probe()<\/p>\n<p>This code accidentally calls thermal_zone_device_enable() before checking<br \/>\nwhet<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-25999","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/25999","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=25999"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=25999"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=25999"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}