CVE-2022-48915

In the Linux kernel, the following vulnerability has been resolved:

thermal: core: Fix TZ_GET_TRIP NULL pointer dereference

Do not call get_trip_hyst() from thermal_genl_cmd_tz_get_trip() if the thermal zone does not define one.

This issue is fixed in RHEL-9.2 and above (including RHEL 8.10)

in (rhel-8.7, rhel-8.8, rhel-8.9, rhel-8.10) thermal: core: Fix TZ_GET_TRIP NULL pointer dereference
in (rhel-9.2, rhel-9.3, rhel-9.4, rhel-9.5) thermal: core: Fix TZ_GET_TRIP NULL pointer dereference

Please note that while RHEL-9 kernel-rt still appears as affected, it has been fixed in the same RHSA as RHEL-9 kernel. This is because from RHEL-9.3 onwards, the kernel and kernel-rt fixes are bundled together in a single errata.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.