PT-2026-79690

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ltc4282 write curr function within the hwmon module. When a negative value is provided to the val variable, it is cast directly to an unsigned 64-bit integer u64,...

Linux Distros Unpatched Vulnerability : CVE-2026-74685

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwmon: ltc4282 Clamp negative current limits When a negative value is passed to ltc4282writecurr, the signed long val is cast directly to u64:...

CVE-2026-74604: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: Revert "thermal/drivers/hwmon: Cleanup coding style a bit" Revert commit 030a48b0f6ce "thermal/drivers/hwmon: Cleanup coding style a bit" that introduced a use-after-free into the error path of thermaladdhwmonsysfs by removing a...

Linux Distros Unpatched Vulnerability : CVE-2026-74604

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Revert thermal/drivers/hwmon: Cleanup coding style a bit Revert commit 030a48b0f6ce thermal/drivers/hwmon: Cleanup coding style a bit that introduced a...

CVE-2026-74552

A flaw was found in the Linux kernel's hwmon lm90 driver. A local user can trigger a null pointer dereference by reading sysfs attributes before the driver's registration is complete. This can lead to a system crash, resulting in a denial of service...

CVE-2026-74553

A flaw was found in the Linux kernel's hwmon hardware monitoring subsystem, specifically within the nct6775-core driver. This vulnerability arises from incorrect handling of temperature registers for the NCT6116 chip, where the driver attempts to access more registers than are available. This...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102022)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102022 advisory. In the Linux kernel, the following vulnerability has been resolved: hwmon: w83791d Convert macros to functions to avoid TOCTOU The macro FANFROMREG evaluates its...

CVE-2026-74547

A flaw was found in the Linux kernel's hwmon adt7470 component. A local user can exploit this by configuring the 'autoupdateinterval' to zero via sysfs while 'numtempsensors' is also set to zero. This combination forces the background thread into an unbounded busy-loop, consuming CPU resources an...

CVE-2026-72396

A flaw was found in the Linux kernel's hwmon subsystem, specifically in the adm1275 driver. This vulnerability allows a local attacker or a specially crafted device to trigger an out-of-bounds read during device name comparison. By providing a device name shorter than expected, uninitialized stac...

CVE-2026-72397

A flaw was found in the Linux kernel's hwmon subsystem, specifically within the pmbus/core module. The pmbusdata2regvid function incorrectly hardcoded the VR11 encoding, disregarding the vrmversion configured by the driver. This issue could lead to drivers sending dangerously wrong voltage codes ...

CVE-2026-72395

A flaw was found in the Linux kernel's hwmon pmbus subsystem. A worker designed to batch regulator events can combine multiple distinct hardware fault events into a single bitmask. This combined bitmask is then incorrectly processed by the critical hardware protection function,...

Linux Distros Unpatched Vulnerability : CVE-2026-72395

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwmon: pmbus Fix passing events to regulator core Sashiko reports: Commit 754bd2b4a084 hwmon: pmbus/core Protect regulator operations with mutex introduced a...

Linux Distros Unpatched Vulnerability : CVE-2026-72396

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwmon: adm1275: Prevent reading uninitialized stack While adding support for the ROHM BD127X0 hot-swap controllers, sashiko reported an error in device-name...

Linux Distros Unpatched Vulnerability : CVE-2026-72394

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: hwmon: aspeed-g6-pwm-tach Guard fan RPM calculation against divide-by-zero Sashiko reports: ...

CVE-2026-74549

A flaw was found in the hwmon hardware monitoring driver for the nct6775-core in the Linux kernel. During initialization, the driver incorrectly accesses memory beyond the allocated buffer when handling certain register arrays. This out-of-bounds read can lead to the use of invalid hardware...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099940)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099940 advisory. In the Linux kernel, the following vulnerability has been resolved: hwmon: occ Fix division by zero in occshowpower1 In occshowpower1 case 1, the accumulator is...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100292)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100292 advisory. In the Linux kernel, the following vulnerability has been resolved: hwmon: occ Fix division by zero in occshowpower1 In occshowpower1 case 1, the accumulator is...

The vulnerability in the driver/hwmon/ibmpex.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the driver/hwmon/ibmpex.c component of the Linux operating system is related to situations where there is a race condition in the signal processing routine. Exploiting this vulnerability can allow an attacker to cause a service failure...

SUSE CVE-2026-74546

In the Linux kernel, the following vulnerability has been resolved: hwmon: adt7470 Fix divide-by-zero TOCTOU crash in fan speed read If the fan data becomes 0 between the FANDATAVALID check and the FANPERIODTORPM conversion, it will result in a divide-by-zero crash due to a race with a concurrent...

SUSE CVE-2026-74552

In the Linux kernel, the following vulnerability has been resolved: hwmon: lm90 Only report alarms if driver is ready Userspace can read sysfs attributes before driver registration is complete, immediately after devmhwmondeviceregisterwithinfo has been called. At that time, data-hwmondev is not y...