7.1

CVE-2026-72397

hwmon: (pmbus/core) honor vrm_version in pmbus_data2reg_vid()

In the Linux kernel, the following vulnerability has been resolved:

hwmon: (pmbus/core) honor vrm_version in pmbus_data2reg_vid()

pmbus_data2reg_vid() hardcoded the VR11 encoding regardless of the
vrm_version configured by the driver, while pmbus_reg2data_vid()
already switched on it. Any driver that selects a non-VR11 VID mode
and exposes a regulator (or hwmon vout setter) sent dangerously
wrong codes to PMBUS_VOUT_COMMAND -- e.g. an nvidia195mv part asked
for 200 mV got the VR11 clamp to 500 mV encoded as 0xB2, which the
chip interprets as 1080 mV.

Mirror pmbus_reg2data_vid() so writes round-trip with reads.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 068c227056b9223fea1a759e08db2558d5cbb5ad
Version < 5bd0d47640395f8a8c34446b62d1781b88869dfa
Status affected
Version 068c227056b9223fea1a759e08db2558d5cbb5ad
Version < 828cd614e2af053ca5e1d6da767bbd8a1b5cabfb
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 4.3
Status affected
Version 0
Version < 4.3
Status unaffected
Version <= 7.1.*
Version 7.1.5
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.15% 0.048
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.1 1.8 5.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/5bd0d47640395f8a8c34446b62d1781b88869dfa
https://git.kernel.org/stable/c/828cd614e2af053ca5e1d6da767bbd8a1b5cabfb