PT-2026-98522

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the gpio-fan driver of the hwmon subsystem. The fan alarm irq handler function queues fan data-alarm work, but the system fails to cancel this work durin...

CVE-2026-97582

In the Linux kernel, the following vulnerability has been resolved: hwmon: gpio-fan Fix use-after-free in alarm work fanalarmirqhandler queues fandata-alarmwork, but nothing cancels it. fanalarmnotify dereferences fandata and its hwmon device. On unbind, devres frees the interrupt, which only wai...

CVE-2026-97582: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: hwmon: gpio-fan Fix use-after-free in alarm work fanalarmirqhandler queues fandata-alarmwork, but nothing cancels it. fanalarmnotify dereferences fandata and its hwmon device. On unbind, devres frees the interrupt, which only wai...

CVE-2026-97538: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: hwmon: asusrogryujin Validate HID report lengths rogryujinrawevent parses response headers and payload fields without first checking that they are present in the received report. A short report can therefore make the driver consu...

Linux Distros Unpatched Vulnerability : CVE-2026-98000

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwmon: Fix potential UAF in pecstore Sashiko reports: In pecstore, a guardmutex&hwdev-lock is taken. If the chip write operation returns an error other than...

Linux Distros Unpatched Vulnerability : CVE-2026-97538

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwmon: asusrogryujin Validate HID report lengths rogryujinrawevent parses response headers and payload fields without first checking that they are present in th...

Linux Distros Unpatched Vulnerability : CVE-2026-97967

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwmon: corsair-cpro Remove debugfs entries when probe fails ccpdebugfsinit registers debugfs files whose private data is the devm allocated ccp. If...

ROS-20260925-73-0041

The vulnerability of the adm1266 gpiogetmultiple function in the drivers/hwmon/pmbus/adm1266.c file of the device monitoring driver for the Linux operating system is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to...

Linux Distros Unpatched Vulnerability : CVE-2026-90311

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - thermal: hwmon: Remove hwmon class device along with its parent The current code creates one hwmon device per thermal zone type and that device is registered...

Linux Distros Unpatched Vulnerability : CVE-2026-90178

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwmon: coretemp Fix coredata leak on CPUs without PTS pdata-coredata is allocated in inittempdata when the first core tempdata of a package is created, but it i...

Linux Distros Unpatched Vulnerability : CVE-2026-90136

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - platform/x86/amd/hsmp: Reject negative power cap writes in hwmon hsmphwmonwrite takes the user- supplied hwmon value as a signed long and assigns val /...

CVE-2026-90311

In the Linux kernel, the following vulnerability has been resolved: thermal: hwmon: Remove hwmon class device along with its parent The current code creates one hwmon device per thermal zone type and that device is registered under the first thermal zone of the given type. That turns out to be...

DEBIAN-CVE-2026-90311

In the Linux kernel, the following vulnerability has been resolved: thermal: hwmon: Remove hwmon class device along with its parent The current code creates one hwmon device per thermal zone type and that device is registered under the first thermal zone of the given type. That turns out to be...

CVE-2026-90311

CVE-2026-90311 affects the Linux kernel thermal hwmon subsystem. When a thermal zone holding a hwmon class device is removed (e.g., via unbinding the ACPI thermal driver), the removal can get stuck because another thermal zone of the same type has sysfs attributes registered under that hwmon devi...

CVE-2026-90311 thermal: hwmon: Remove hwmon class device along with its parent

In the Linux kernel, the following vulnerability has been resolved: thermal: hwmon: Remove hwmon class device along with its parent The current code creates one hwmon device per thermal zone type and that device is registered under the first thermal zone of the given type. That turns out to be...

EUVD-2026-81972

In the Linux kernel, the following vulnerability has been resolved: thermal: hwmon: Remove hwmon class device along with its parent The current code creates one hwmon device per thermal zone type and that device is registered under the first thermal zone of the given type. That turns out to be...

CVE-2026-90311 thermal: hwmon: Remove hwmon class device along with its parent

In the Linux kernel, the following vulnerability has been resolved: thermal: hwmon: Remove hwmon class device along with its parent The current code creates one hwmon device per thermal zone type and that device is registered under the first thermal zone of the given type. That turns out to be...

CVE-2026-90311: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: thermal: hwmon: Remove hwmon class device along with its parent The current code creates one hwmon device per thermal zone type and that device is registered under the first thermal zone of the given type. That turns out to be...

CVE-2026-90136: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/hsmp: Reject negative power cap writes in hwmon hsmphwmonwrite takes the user-supplied hwmon value as a signed long and assigns "val / MICROWATTPERMILLIWATT" to msg.args0, which is a u32. MICROWATTPERMILLIWATT is...

kernel security, bug fix, and enhancement update

6.12.0-211.56.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...