CVE-2026-92504

Last refreshed2026-10-19

Status: UPDATED | Advisory ID: CVE-2026-92504

Key Details

CVE	CVE-2026-92504
CVSS Score / Version	7.0 (High) / CVSS v3.1
Updated	2026-10-19
CVSS Vector	`CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H`
CVSS Prose	attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products	Linux Kernel

Vendor	Product	Affected Versions	Patch Status
Linux	Linux Kernel

Vendor

Product

Affected Versions

Patch Status

Linux

Linux Kernel

Subsystems	OT Supporting Infrastructure
Sectors	All Sectors

In the Linux kernel, the following vulnerability has been resolved:

thermal: intel: int3400: clean up ODVP on probe failures

evaluate_odvp() creates per-ODVP sysfs files before the thermal zone

and later probe resources are registered. The current unwind path only

calls cleanup_odvp() from the late sysfs failure path, so failures after

evaluate_odvp() but before that label, including

thermal_tripless_zone_device_register() failures, leave the ODVP files

and storage behind.

Move the ODVP cleanup to the common ART/TRT unwind path so every failure

after evaluate_odvp() releases the ODVP state. Also clear the cached

ODVP pointers in cleanup_odvp(), because evaluate_odvp() can already call

it for partial setup failures while probe continues. (NVD)

Monitor Linux's web page for any future patch releases.

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-92504
CVE	https://www.cve.org/CVERecord?id=CVE-2026-92504

Source

Reference

NVD

CVE