CVE-2026-97967

In the Linux kernel, the following vulnerability has been resolved: hwmon: corsair-cpro Remove debugfs entries when probe fails ccpdebugfsinit registers debugfs files whose private data is the devm allocated ccp. If hwmondeviceregisterwithinfo fails right after it, ccpprobe returns without removi...

CVE-2026-97582 hwmon: (gpio-fan) Fix use-after-free in alarm work

In the Linux kernel, the following vulnerability has been resolved: hwmon: gpio-fan Fix use-after-free in alarm work fanalarmirqhandler queues fandata-alarmwork, but nothing cancels it. fanalarmnotify dereferences fandata and its hwmon device. On unbind, devres frees the interrupt, which only wai...

CVE-2026-97582 hwmon: (gpio-fan) Fix use-after-free in alarm work

In the Linux kernel, the following vulnerability has been resolved: hwmon: gpio-fan Fix use-after-free in alarm work fanalarmirqhandler queues fandata-alarmwork, but nothing cancels it. fanalarmnotify dereferences fandata and its hwmon device. On unbind, devres frees the interrupt, which only wai...

CVE-2026-97582

In the Linux kernel, the following vulnerability has been resolved: hwmon: gpio-fan Fix use-after-free in alarm work fanalarmirqhandler queues fandata-alarmwork, but nothing cancels it. fanalarmnotify dereferences fandata and its hwmon device. On unbind, devres frees the interrupt, which only wai...

CVE-2026-97582

The Linux kernel contains a use-after-free vulnerability within the hwmon: (gpio-fan) component. The issue stems from fan_alarm_irq_handler() queuing fan_data->alarm_work without a corresponding cancellation mechanism, while fan_alarm_notify() dereferences fan_data and the hwmon device. During...

EUVD-2026-86890

In the Linux kernel, the following vulnerability has been resolved: hwmon: gpio-fan Fix use-after-free in alarm work fanalarmirqhandler queues fandata-alarmwork, but nothing cancels it. fanalarmnotify dereferences fandata and its hwmon device. On unbind, devres frees the interrupt, which only wai...

CVE-2026-97538

In the Linux kernel, the following vulnerability has been resolved: hwmon: asusrogryujin Validate HID report lengths rogryujinrawevent parses response headers and payload fields without first checking that they are present in the received report. A short report can therefore make the driver consu...

CVE-2026-97538 hwmon: (asus_rog_ryujin) Validate HID report lengths

In the Linux kernel, the following vulnerability has been resolved: hwmon: asusrogryujin Validate HID report lengths rogryujinrawevent parses response headers and payload fields without first checking that they are present in the received report. A short report can therefore make the driver consu...

CVE-2026-97538

The Linux kernel contains a vulnerability in the asus_rog_ryujin hwmon driver. The function rog_ryujin_raw_event() fails to verify the presence of response headers and payload fields in received reports. This allows a short report to cause the driver to consume uninitialized bytes from the HID tr...

EUVD-2026-86846

In the Linux kernel, the following vulnerability has been resolved: hwmon: asusrogryujin Validate HID report lengths rogryujinrawevent parses response headers and payload fields without first checking that they are present in the received report. A short report can therefore make the driver consu...

CVE-2026-97538 hwmon: (asus_rog_ryujin) Validate HID report lengths

In the Linux kernel, the following vulnerability has been resolved: hwmon: asusrogryujin Validate HID report lengths rogryujinrawevent parses response headers and payload fields without first checking that they are present in the received report. A short report can therefore make the driver consu...

ROS-20260925-73-0049

The vulnerability of the adm1266nvmemreadblackbox function in the drivers/hwmon/pmbus/adm1266.c driver for monitoring hardware in the Linux operating system is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

CVE-2026-98000

In the Linux kernel, the following vulnerability has been resolved: hwmon: Fix potential UAF in pecstore Sashiko reports: In pecstore, a guardmutex&hwdev-lock is taken. If the chip write operation returns an error other than -EOPNOTSUPP, the code jumps to the put label, which calls putdevicehdev...

Linux Distros Unpatched Vulnerability : CVE-2026-98001

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwmon: ltc4282 Make sure clkinitdata is fully initialized The clkinitdata structure contains several mutually-exclusive members for different methods to specify...

PT-2026-98478

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The rog ryujin raw event function in the asus rog ryujin hardware monitoring hwmon driver parses response headers and payload fields without verifying their presence in the received...

Linux Distros Unpatched Vulnerability : CVE-2026-97968

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwmon: corsair-cpro Create debugfs entries after hwmon registration ccpdebugfsinit registers debugfs files whose private data is the devm allocated ccp. It run...

CVE-2026-98001

In the Linux kernel, the following vulnerability has been resolved: hwmon: ltc4282 Make sure clkinitdata is fully initialized The clkinitdata structure contains several mutually-exclusive members for different methods to specify the possible parents of a clock, prompting drivers to initialize onl...

CVE-2026-97538

In the Linux kernel, the following vulnerability has been resolved: hwmon: asusrogryujin Validate HID report lengths rogryujinrawevent parses response headers and payload fields without first checking that they are present in the received report. A short report can therefore make the driver consu...

Linux Distros Unpatched Vulnerability : CVE-2026-97582

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwmon: gpio-fan Fix use-after-free in alarm work fanalarmirqhandler queues fandata-alarmwork, but nothing cancels it. fanalarmnotify dereferences fandata and it...

ROS-20260925-73-0001

The vulnerability of the xgenehwmonremove function driver/hwmon/xgene-hwmon.c in the xgene-hwmon device monitoring driver for the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure and disclose...