{"id":"CVE-2026-92504","summary":"thermal: intel: int3400: clean up ODVP on probe failures","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nthermal: intel: int3400: clean up ODVP on probe failures\n\nevaluate_odvp() creates per-ODVP sysfs files before the thermal zone\nand later probe resources are registered. The current unwind path only\ncalls cleanup_odvp() from the late sysfs failure path, so failures after\nevaluate_odvp() but before that label, including\nthermal_tripless_zone_device_register() failures, leave the ODVP files\nand storage behind.\n\nMove the ODVP cleanup to the common ART/TRT unwind path so every failure\nafter evaluate_odvp() releases the ODVP state. Also clear the cached\nODVP pointers in cleanup_odvp(), because evaluate_odvp() can already call\nit for partial setup failures while probe continues.","modified":"2026-09-19T03:47:29.586961711Z","published":"2026-09-17T16:10:16.731Z","database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/92xxx/CVE-2026-92504.json"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/08df725b927512fa9672b146a00766da478b6c2e"},{"type":"WEB","url":"https://git.kernel.org/stable/c/169772cd2147c517be5cfda2710d17f8c90d6f10"},{"type":"WEB","url":"https://git.kernel.org/stable/c/5798c714fccf1b4939a98a812b9073da365172c8"},{"type":"WEB","url":"https://git.kernel.org/stable/c/ad13e550ce51c66560bafd315eb5d09f2ee7c4ce"},{"type":"WEB","url":"https://git.kernel.org/stable/c/bc0e96267a6715fcc4b81cf980034a5e65703780"},{"type":"WEB","url":"https://git.kernel.org/stable/c/bfd6df12ce6781e4bf1c7177dab42a8780177960"},{"type":"WEB","url":"https://git.kernel.org/stable/c/d7b025d3fdf3cf8b726ce1d13f434f57477972bb"},{"type":"WEB","url":"https://git.kernel.org/stable/c/d83dc9ce57a746a6dca28439bcc0575d26fa6986"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/92xxx/CVE-2026-92504.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92504"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"006f006f1e5c48e5ddd6515eab2c9a7b27ce1144"},{"fixed":"5798c714fccf1b4939a98a812b9073da365172c8"},{"fixed":"bfd6df12ce6781e4bf1c7177dab42a8780177960"},{"fixed":"ad13e550ce51c66560bafd315eb5d09f2ee7c4ce"},{"fixed":"08df725b927512fa9672b146a00766da478b6c2e"},{"fixed":"bc0e96267a6715fcc4b81cf980034a5e65703780"},{"fixed":"d7b025d3fdf3cf8b726ce1d13f434f57477972bb"},{"fixed":"169772cd2147c517be5cfda2710d17f8c90d6f10"},{"fixed":"d83dc9ce57a746a6dca28439bcc0575d26fa6986"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-92504.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.8.0"},{"fixed":"5.10.270"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.11.0"},{"fixed":"5.15.221"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.16.0"},{"fixed":"6.1.188"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.6.157"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.12.110"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.52"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.2.6"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-92504.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}