CVE-2026-74552

CVE-2026-74552 concerns the Linux kernel hwmon lm90 driver. Userspace can read certain sysfs attributes before the driver is fully registered, when data->hwmon_dev is still uninitialized, potentially triggering a NULL pointer dereference. The root cause is that lm90_update_device() and lm90_up...

CVE-2026-74551

CVE-2026-74551 affects the Linux kernel hwmon path for nzxt-smart2. The issue arises when send_output_report() triggers USB HID DMA mapping via hid_hw_output_report(), which maps the output buffer for DMA using usb_interrupt_msg(). On non-coherent CPUs (e.g., ARM/MIPS), flushing/invalidating the ...

EUVD-2026-59616

In the Linux kernel, the following vulnerability has been resolved: hwmon: nzxt-smart2 DMA-align output buffer Sashiko reports: When sendoutputreport calls hidhwoutputreport, the underlying USB HID core calls usbinterruptmsg which maps this buffer directly for DMA. When the DMA mapping flushes or...

CVE-2026-74552

In the Linux kernel, the following vulnerability has been resolved: hwmon: lm90 Only report alarms if driver is ready Userspace can read sysfs attributes before driver registration is complete, immediately after devmhwmondeviceregisterwithinfo has been called. At that time, data-hwmondev is not y...

CVE-2026-74550

In the Linux kernel, the following vulnerability has been resolved: net: do not send ICMP/NDISC Redirects when peer allocation fails When inetgetpeerv4 or inetgetpeerv6 fails to allocate a peer entry under memory pressure or tree size caps, redirect handlers previously fell back to sending...

CVE-2026-74550 net: do not send ICMP/NDISC Redirects when peer allocation fails

In the Linux kernel, the following vulnerability has been resolved: net: do not send ICMP/NDISC Redirects when peer allocation fails When inetgetpeerv4 or inetgetpeerv6 fails to allocate a peer entry under memory pressure or tree size caps, redirect handlers previously fell back to sending...

CVE-2026-74550

Summary: CVE-2026-74550 affects the Linux kernel’s redirect handling for ICMP/NDISC redirects when peer allocation fails. When inet_getpeer_v4() or inet_getpeer_v6() cannot allocate a peer entry under memory pressure or tree size caps, redirect handlers previously could emit un-rate-limited ICMP/...

CVE-2026-74550

In the Linux kernel, the following vulnerability has been resolved: net: do not send ICMP/NDISC Redirects when peer allocation fails When inetgetpeerv4 or inetgetpeerv6 fails to allocate a peer entry under memory pressure or tree size caps, redirect handlers previously fell back to sending...

CVE-2026-74550 net: do not send ICMP/NDISC Redirects when peer allocation fails

In the Linux kernel, the following vulnerability has been resolved: net: do not send ICMP/NDISC Redirects when peer allocation fails When inetgetpeerv4 or inetgetpeerv6 fails to allocate a peer entry under memory pressure or tree size caps, redirect handlers previously fell back to sending...

EUVD-2026-59615

In the Linux kernel, the following vulnerability has been resolved: net: do not send ICMP/NDISC Redirects when peer allocation fails When inetgetpeerv4 or inetgetpeerv6 fails to allocate a peer entry under memory pressure or tree size caps, redirect handlers previously fell back to sending...

EUVD-2026-59742

In the Linux kernel, the following vulnerability has been resolved: hwmon: nct6775-core Prevent access to unsupported weight registers Sashiko reports: During initialization of the nct6116 chip, the driver sets data-pwmnum to 5. However, it assigns several NCT6106 register arrays such as...

CVE-2026-74548

CVE-2026-74548 affects the Linux kernel’s forcedeth driver, where nv_remove() frees per-CPU txrx_stats before unregister_netdev(), allowing a use-after-free for txrx_stats accessed by ndo_get_stats64, the NAPI/xmit data path, and nv_close()/drain until unregistration completes. The fix delays fre...

CVE-2026-74549

CVE-2026-74549 affects the Linux kernel hwmon nct6775-core driver. The issue arises during nct6116 initialization: data->pwm_num is set to 5, but several NCT6106 weight-related register arrays (e.g., WEIGHT_DUTY_STEP, WEIGHT_TEMP_SEL, WEIGHT_TEMP_*) are only 3 elements long and are assigned to...

CVE-2026-74549 hwmon: (nct6775-core) Prevent access to unsupported weight registers

In the Linux kernel, the following vulnerability has been resolved: hwmon: nct6775-core Prevent access to unsupported weight registers Sashiko reports: During initialization of the nct6116 chip, the driver sets data-pwmnum to 5. However, it assigns several NCT6106 register arrays such as...

CVE-2026-74549

In the Linux kernel, the following vulnerability has been resolved: hwmon: nct6775-core Prevent access to unsupported weight registers Sashiko reports: During initialization of the nct6116 chip, the driver sets data-pwmnum to 5. However, it assigns several NCT6106 register arrays such as...

EUVD-2026-59741

In the Linux kernel, the following vulnerability has been resolved: forcedeth: fix UAF of txrxstats in nvremove nvremove frees the per-CPU txrxstats before unregisternetdev. Until unregister completes, ndogetstats64, the NAPI/xmit data path, and nvclose/drain may still access txrxstats, leading t...

CVE-2026-74548 forcedeth: fix UAF of txrx_stats in nv_remove

In the Linux kernel, the following vulnerability has been resolved: forcedeth: fix UAF of txrxstats in nvremove nvremove frees the per-CPU txrxstats before unregisternetdev. Until unregister completes, ndogetstats64, the NAPI/xmit data path, and nvclose/drain may still access txrxstats, leading t...

CVE-2026-74546

CVE-2026-74546 affects the Linux kernel hwmon adt7470 driver. A TOCTOU race can occur if fan data becomes 0 between the FAN_DATA_VALID() check and the FAN_PERIOD_TO_RPM() conversion, causing a divide-by-zero crash. The issue is mitigated by reading fan data once to prevent a concurrent update fro...

CVE-2026-74546 hwmon: (adt7470) Fix divide-by-zero TOCTOU crash in fan speed read

In the Linux kernel, the following vulnerability has been resolved: hwmon: adt7470 Fix divide-by-zero TOCTOU crash in fan speed read If the fan data becomes 0 between the FANDATAVALID check and the FANPERIODTORPM conversion, it will result in a divide-by-zero crash due to a race with a concurrent...

CVE-2026-74546 hwmon: (adt7470) Fix divide-by-zero TOCTOU crash in fan speed read

In the Linux kernel, the following vulnerability has been resolved: hwmon: adt7470 Fix divide-by-zero TOCTOU crash in fan speed read If the fan data becomes 0 between the FANDATAVALID check and the FANPERIODTORPM conversion, it will result in a divide-by-zero crash due to a race with a concurrent...