CVE-2026-72396: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: hwmon: adm1275: Prevent reading uninitialized stack While adding support for the ROHM BD127X0 hot-swap controllers, sashiko reported an error in device-name comparison, which can lead to reading uninitialized stack memory. Quotin...

CVE-2026-72397: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbus/core honor vrmversion in pmbusdata2regvid pmbusdata2regvid hardcoded the VR11 encoding regardless of the vrmversion configured by the driver, while pmbusreg2datavid already switched on it. Any driver that selects a...

CVE-2026-74551: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: hwmon: nzxt-smart2 DMA-align output buffer Sashiko reports: When sendoutputreport calls hidhwoutputreport, the underlying USB HID core calls usbinterruptmsg which maps this buffer directly for DMA. When the DMA mapping flushes or...

PT-2026-72583

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the hardware monitoring hwmon PMBus core where regulator events are batched using atomic or. The delayed worker passes the combined bitmask directly to the regulator...

PT-2026-72584

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the adm1275 probe function where an out-of-bounds stack read can occur during device-name comparison. The function i2c smbus read block data reads up to 32 bytes into...

PT-2026-73004

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the lm90 driver when userspace reads sysfs attributes before driver registration is complete. This happens immediately after the devm hwmon device...

CVE-2026-74547: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: hwmon: adt7470 Fix busy-loop and I2C flooding in update thread When userspace configures 'autoupdateinterval' to 0 via sysfs, the background kthread executes scheduletimeoutinterruptible0, which returns immediately. If...

PT-2026-73005

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the nct6775-core hardware monitoring hwmon component. The code incorrectly used the register array size of the NCT6106 for the NCT6116, which only possesses three...

Linux Distros Unpatched Vulnerability : CVE-2026-74553

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwmon: nct6775-core Fix number of temperature registers for NCT6116 Unlike NCT6106, NCT6116 only has three temperature registers, and with it only three...

Linux Distros Unpatched Vulnerability : CVE-2026-74552

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwmon: lm90 Only report alarms if driver is ready Userspace can read sysfs attributes before driver registration is complete, immediately after...

Linux Distros Unpatched Vulnerability : CVE-2026-72397

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwmon: pmbus/core honor vrmversion in pmbusdata2regvid pmbusdata2regvid hardcoded the VR11 encoding regardless of the vrmversion configured by the driver, while...

Linux Distros Unpatched Vulnerability : CVE-2026-74549

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwmon: nct6775-core Prevent access to unsupported weight registers Sashiko reports: During initialization of the nct6116 chip, the driver sets data-pwmnum to 5...

Linux Distros Unpatched Vulnerability : CVE-2026-74546

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwmon: adt7470 Fix divide-by-zero TOCTOU crash in fan speed read If the fan data becomes 0 between the FANDATAVALID check and the FANPERIODTORPM conversion, it...

The vulnerability of the hwmon/w83791d.c component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the hwmon/w83791d.c component in the Linux operating system is related to insufficient checking of the status of the shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

EUVD-2026-57051

In the Linux kernel, the following vulnerability has been resolved: hwmon: gigabytewaterforce Stop device IO before calling hidhwstop Calling hidhwstop does not stop the device IO. This results in a race condition between hidinputreport and the point immediately following the execution of...

PT-2026-70957

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the gigabyte waterforce hardware monitoring hwmon component. The problem occurs because hid hw stop does not stop device IO, creating a race conditio...

SUSE CVE-2026-68340

In the Linux kernel, the following vulnerability has been resolved: hwmon: occ: validate poll response sensor blocks The OCC poll response parser walks a counted list of sensor data blocks. It used the static backing-array capacity as the parse boundary, but a transport response makes only...

CVE-2026-68358

A flaw was found in the Linux kernel's hwmon nzxt-kraken3 component. A race condition exists where the hidhwstop function does not stop device input/output IO. This can lead to a use-after-free UAF vulnerability if a device probe operation fails after IO has been initiated. This vulnerability cou...

CVE-2026-68340

A flaw was found in the Linux kernel's hwmon OCC OpenPOWER Abbreviated Command and Control poll response parser. This vulnerability occurs because the parser incorrectly uses a static array capacity as the boundary for sensor data blocks instead of the actual data length. A specially crafted,...

CVE-2026-68359

A flaw was found in the Linux kernel's hwmon nzxt-smart2 component. A race condition exists when the hidhwstop function is called without first stopping device input/output IO. If a device probe operation fails after IO has been initiated, this race condition can lead to a use-after-free UAF...