CVE-2026-43332

A flaw was found in the Linux kernel's thermal core subsystem. When thermal_zone_device_register_with_trips() fails during device registration, it does not properly wait for the thermal zone device's removal completion. This can lead to the premature freeing of the device's memory, creating a use-after-free vulnerability. A local attacker could potentially exploit this to cause a denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.