thermal: int340x: Add NULL check for adev

Summary

In the Linux kernel, the following vulnerability has been resolved: thermal: int340x: Add NULL check for adev Not all devices have an ACPI companion fwnode, so adev might be NULL. This is similar to the commit cd2fd6eab480 ("platform/x86: int3472: Check for adev == NULL"). Add a check for adev not being set and return -ENODEV in that case to avoid a possible NULL pointer deref in int3402_thermal_probe(). Note, under the same directory, int3400_thermal_probe() has such a check. [ rjw: Subject edit, added Fixes: ]

Timeline

1. Apr 16, 2025, 2:13 PM UTCCVE published
2. Oct 1, 2025, 5:03 PM UTCCISA SSVC assessment

   Exploitation: none · Automatable: no · Technical impact: partial

3. Oct 15, 2026, 1:05 AM UTCRecord last updated

Affected versions

• Linux Linux

  From 77e337c6e23e3b9d22e09ffec202a80f755a54c2 · fixed in d0d21c8e44216fa9afdb3809edf213f3c0a8c060; From 77e337c6e23e3b9d22e09ffec202a80f755a54c2 · fixed in bc7b5f782d28942dbdfda70df30ce132694a06de; From 77e337c6e23e3b9d22e09ffec202a80f755a54c2 · fixed in 3155d5261b518776d1b807d9d922669991bbee56; From 77e337c6e23e3b9d22e09ffec202a80f755a54c2 · fixed in 6a810c462f099353e908c70619638884cb82229c; From 77e337c6e23e3b9d22e09ffec202a80f755a54c2 · fixed in ac2eb7378319e3836cdf3a2c15a0bdf04c50e81d; From 77e337c6e23e3b9d22e09ffec202a80f755a54c2 · fixed in 953d28a4f459fcbde2d08f51aeca19d6b0f179f3; From 77e337c6e23e3b9d22e09ffec202a80f755a54c2 · fixed in 0c49f12c77b77a706fd41370c11910635e491845; From 77e337c6e23e3b9d22e09ffec202a80f755a54c2 · fixed in 8e8f1ddf4186731649df8bc9646017369eb19186; From 77e337c6e23e3b9d22e09ffec202a80f755a54c2 · fixed in 2542a3f70e563a9e70e7ded314286535a3321bdb

• Linux Linux

  3.18

• KernelLinux

  From 3.18.0 · fixed in 5.4.292; From 5.5.0 · fixed in 5.10.236; From 5.11.0 · fixed in 5.15.180; From 5.16.0 · fixed in 6.1.134; From 6.2.0 · fixed in 6.6.87; From 6.7.0 · fixed in 6.12.23; From 6.13.0 · fixed in 6.13.11; From 6.14.0 · fixed in 6.14.2

References 9