CVE-2025-40224

CVE-2025-40224 affects the Linux kernel hwmon: (cgbc-hwmon) driver. The root cause is a missing NULL check after devm_kzalloc() for sensor data, which could cause a NULL pointer dereference and a kernel crash if allocation fails. The documented fix adds a NULL pointer check and returns -ENOMEM to...

EUVD-2025-201235

In the Linux kernel, the following vulnerability has been resolved: hwmon: cgbc-hwmon Add missing NULL check after devmkzalloc The driver allocates memory for sensor data using devmkzalloc, but did not check if the allocation succeeded. In case of memory allocation failure, dereferencing the NULL...

CVE-2025-40224 hwmon: (cgbc-hwmon) Add missing NULL check after devm_kzalloc()

In the Linux kernel, the following vulnerability has been resolved: hwmon: cgbc-hwmon Add missing NULL check after devmkzalloc The driver allocates memory for sensor data using devmkzalloc, but did not check if the allocation succeeded. In case of memory allocation failure, dereferencing the NULL...

CVE-2025-40224 hwmon: (cgbc-hwmon) Add missing NULL check after devm_kzalloc()

In the Linux kernel, the following vulnerability has been resolved: hwmon: cgbc-hwmon Add missing NULL check after devmkzalloc The driver allocates memory for sensor data using devmkzalloc, but did not check if the allocation succeeded. In case of memory allocation failure, dereferencing the NULL...

CVE-2025-40224: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: hwmon: cgbc-hwmon Add missing NULL check after devmkzalloc The driver allocates memory for sensor data using devmkzalloc, but did not check if the allocation succeeded. In case of memory allocation failure, dereferencing the NULL...

PT-2025-49051

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel driver allocates memory for sensor data using devm kzalloc, but lacks a check to ensure the allocation was successful. If memory allocation fails, attempting to...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-46758)

hwmon: lm95234 underflows seen when writing limit attributes DIVROUNDCLOSEST after kstrtol results in an underflow if a large negative number such as -9223372036854775808 is provided by the user. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-46756)

hwmon: w83627ehf underflows seen when writing limit attributes DIVROUNDCLOSEST after kstrtol results in an underflow if a large negative number such as -9223372036854775808 is provided by the user. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot fo...

The vulnerability of the asus_ec_probe() function in the driver/hwmon/asus-ec-sensors.c file of the Linux operating system’s hardware monitoring driver allows a hacker to cause a service failure.

The vulnerability of the asusecprobe function in the driver/hwmon/asus-ec-sensors.c file of the Linux operating system’s hardware monitoring driver is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the `create_core_data()` function in the `drivers/hwmon/coretemp.c` file of the Linux kernel allows a attacker to access protected information or cause service failures.

The vulnerability of the createcoredata function in the drivers/hwmon/coretemp.c file of the Linux kernel lies in the handling of operations that go beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to access protected information or cause service failures...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989279)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989279 advisory. In the Linux kernel, the following vulnerability has been resolved: hwmon: w83793 Fix NULL pointer dereference by removing unnecessary structure field If driver read...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-989605)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989605 advisory. In the Linux kernel, the following vulnerability has been resolved: hwmon: coretemp Check for null before removing sysfs attrs If coretempaddcore gets an error then...

Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices Buffer Overflow (CVE-2024-46759)

In the Linux kernel, the following vulnerability has been resolved: hwmon: adc128d818 Fix underflows seen when writing limit attributes DIVROUNDCLOSEST after kstrtol results in an underflow if a large negative number such as -9223372036854775808 is provided by the user. Fix it by reordering...

EUVD-2023-59996

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix NULL dereference in niwriteinode Syzbot reports a NULL dereference in niwriteinode. When creating a new inode, if allocation fails in miinit function called in miformatnew function, mi-mrec is set to NULL. In the...

Linux Distros Unpatched Vulnerability : CVE-2023-53682

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwmon: xgene Fix ioremap and memremap leak Smatch reports: drivers/hwmon/xgene-hwmon.c:757 xgenehwmonprobe warn: 'ctx-pcccommaddr' from ioremap not released on...

Linux Distros Unpatched Vulnerability : CVE-2023-53612

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwmon: coretemp Simplify platform device handling Coretemp's platform driver is unconventional. All the real work is done globally by the initcall and CPU hotpl...

AZL-76425 CVE-2023-53682 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: hwmon: xgene Fix ioremap and memremap leak Smatch reports: drivers/hwmon/xgene-hwmon.c:757 xgenehwmonprobe warn: 'ctx-pcccommaddr' from ioremap not released on line: 757. This is because in drivers/hwmon/xgene-hwmon.c:701...

CVE-2023-53682

In the Linux kernel, the following vulnerability has been resolved: hwmon: xgene Fix ioremap and memremap leak Smatch reports: drivers/hwmon/xgene-hwmon.c:757 xgenehwmonprobe warn: 'ctx-pcccommaddr' from ioremap not released on line: 757. This is because in drivers/hwmon/xgene-hwmon.c:701...

CVE-2023-53682

CVE-2023-53682 affects the Linux kernel hwmon xgene driver. The root cause is that ioremap() and memremap() were not released in xgene_hwmon_probe(), creating a potential resource leak through ctx->pcc_comm_addr. The fix replaces ioremap and memremap with devm_ioremap and devm_memremap, ensuri...

CVE-2023-53682 hwmon: (xgene) Fix ioremap and memremap leak

In the Linux kernel, the following vulnerability has been resolved: hwmon: xgene Fix ioremap and memremap leak Smatch reports: drivers/hwmon/xgene-hwmon.c:757 xgenehwmonprobe warn: 'ctx-pcccommaddr' from ioremap not released on line: 757. This is because in drivers/hwmon/xgene-hwmon.c:701...