CVE-2026-98200

The Linux kernel contains a use-after-free vulnerability in the hwmon (hp-wmi-sensors) component. The issue occurs because fungible_show() dereferences the nsensor->current_state pointer without holding state->lock, while the update_numeric_sensor_from_wobj() function frees and replaces tha...

EUVD-2026-93128

In the Linux kernel, the following vulnerability has been resolved: hwmon: hp-wmi-sensors Fix use-after-free in fungibleshow nsensor-currentstate is dynamically replaced as the sensor's state changes. updatenumericsensorfromwobj does this by freeing the old string and installing a new one: if...

EUVD-2026-93127

In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbus/core increase number of phases and add new mask Increase the number of phases to 16 as a new upcoming device supports such a number. While at it, add a new mask for controlling the source of the output voltage. Note...

CVE-2026-98199

The Linux kernel contains a vulnerability in the hwmon (pmbus/core) component. The issue stems from the system supporting fewer phases than some hardware devices actually possess; specifically, the mp2975 driver supports up to 14 phases and the mp2856 driver supports up to 12 phases. This discrep...

CVE-2026-98197

In the Linux kernel , the w83791d driver incorrectly retains the w83791d_group_fanpwm45 sysfs group during normal teardown if the fan/pwm 4-5 pins are not used as GPIO. While the probe error path handles its removal, the normal remove path fails to do so, leaving these sysfs files active after th...

EUVD-2026-93126

In the Linux kernel, the following vulnerability has been resolved: hwmon: pwm-fan Stop RPM timer before freeing tach data sampletimer rearms the RPM timer and accesses the devm-managed ctx-tachs and ctx-pulsesperrevolution arrays. The cleanup action which stops the timer is registered before tho...

EUVD-2026-93125

In the Linux kernel, the following vulnerability has been resolved: hwmon: w83791d remove fan/pwm 4-5 sysfs group on remove When the fan/pwm 4-5 pins are not used as GPIO, w83791dprobe creates the w83791dgroupfanpwm45 sysfs group on the I2C client device. The probe error path removes this group...

CVE-2026-98198

The Linux kernel contains a vulnerability in the hwmon (pwm-fan) component where the sample_timer() function can access freed memory. This occurs because the cleanup action to stop the RPM timer is registered before the ctx->tachs and ctx->pulses_per_revolution arrays are allocated; since d...

CentOS Linux 7 [TuxCare] Security Update: bpftool / kernel / kernel-debug / kernel-debug-devel / kernel-devel / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1780133416)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1780133416 advisory. - In the Linux kernel, the following vulnerability has been resolved: nvme-rdma: fix possible use-after-free in transport errorrecovery...

AlmaLinux 9.2 [TuxCare] Security Update: bpftool / kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1742806909)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1742806909 advisory. - In the Linux kernel, the following vulnerability has been resolved: asix: fix uninit-value in asixmdioread asixreadcmd may read le...

AlmaLinux 9.2 [TuxCare] Security Update: bpftool / kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1783355084)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1783355084 advisory. - In the Linux kernel, the following vulnerability has been resolved: hwmon: w83792d Fix NULL pointer dereference by removing...

CVE-2026-90178

A flaw was found in the Linux kernel's hwmon coretemp module. On systems with CPUs that do not support X86FEATUREPTS, the coredata array, which is allocated to manage temperature data, is not properly released. This memory leak can occur when the coretemp module is loaded and unloaded, potentiall...

ROS-20260929-73-0183

The vulnerability of the hwmon/w83791d.c component in the Linux operating system is related to insufficient checking of the status of the shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260929-73-0054

The vulnerability of the q54sj108a2debugfsread function in the drivers/hwmon/pmbus/q54sj108a2.c file, a driver for hardware monitoring in the Linux operating system, involves copying buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerabilit...

CVE-2026-98000

A flaw was found in the Linux kernel's Hardware Monitoring hwmon subsystem. This vulnerability allows a local user to cause a Denial of Service DoS or potentially corrupt memory by triggering a use-after-free UAF condition. When an error occurs during a device write operation, the kernel releases...

CVE-2026-98000

In the Linux kernel, the following vulnerability has been resolved: hwmon: Fix potential UAF in pecstore Sashiko reports: In pecstore, a guardmutex&hwdev-lock is taken. If the chip write operation returns an error other than -EOPNOTSUPP, the code jumps to the put label, which calls putdevicehdev...

CVE-2026-98001

In the Linux kernel, the following vulnerability has been resolved: hwmon: ltc4282 Make sure clkinitdata is fully initialized The clkinitdata structure contains several mutually-exclusive members for different methods to specify the possible parents of a clock, prompting drivers to initialize onl...

DEBIAN-CVE-2026-98000

In the Linux kernel, the following vulnerability has been resolved: hwmon: Fix potential UAF in pecstore Sashiko reports: In pecstore, a guardmutex&hwdev-lock is taken. If the chip write operation returns an error other than -EOPNOTSUPP, the code jumps to the put label, which calls putdevicehdev...

DEBIAN-CVE-2026-98001

In the Linux kernel, the following vulnerability has been resolved: hwmon: ltc4282 Make sure clkinitdata is fully initialized The clkinitdata structure contains several mutually-exclusive members for different methods to specify the possible parents of a clock, prompting drivers to initialize onl...

DEBIAN-CVE-2026-97967

In the Linux kernel, the following vulnerability has been resolved: hwmon: corsair-cpro Remove debugfs entries when probe fails ccpdebugfsinit registers debugfs files whose private data is the devm allocated ccp. If hwmondeviceregisterwithinfo fails right after it, ccpprobe returns without removi...