-

CVE-2026-74546

hwmon: (adt7470) Fix divide-by-zero TOCTOU crash in fan speed read

In the Linux kernel, the following vulnerability has been resolved:

hwmon: (adt7470) Fix divide-by-zero TOCTOU crash in fan speed read

If the fan data becomes 0 between the FAN_DATA_VALID() check and the
FAN_PERIOD_TO_RPM() conversion, it will result in a divide-by-zero crash
due to a race with a concurrent update of the cached fan value.

Fix a TOCTOU issue by reading fan data once.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
Produkt Linux
Default Statusunaffected
Version fc958a61ff6d34a0ec42744d3ff524ee202b2e9f
Version < 689a2ea75434131d0af58aeb7d51fde40e858b4d
Status affected
Version fc958a61ff6d34a0ec42744d3ff524ee202b2e9f
Version < 009240d057e26831cc925feaba4c490209c1d0ba
Status affected
Version fc958a61ff6d34a0ec42744d3ff524ee202b2e9f
Version < d328175045176f85c15c369bd21dc551351e7935
Status affected
Version fc958a61ff6d34a0ec42744d3ff524ee202b2e9f
Version < 832069bec79cf6f903441c5769d3cdba95d0af33
Status affected
Version fc958a61ff6d34a0ec42744d3ff524ee202b2e9f
Version < 96ad57d31763559d376416cdf3bf5ae79bbbebec
Status affected
Version fc958a61ff6d34a0ec42744d3ff524ee202b2e9f
Version < 76963b04b2d1c648d69949d8dd521e1ff7f40b51
Status affected
Version fc958a61ff6d34a0ec42744d3ff524ee202b2e9f
Version < 1b46fe9dc8f8de59310f37e6c5e5c0e05ded46c3
Status affected
HerstellerLinux
Produkt Linux
Default Statusaffected
Version 5.15
Status affected
Version 0
Version < 5.15
Status unaffected
Version <= 5.15.*
Version 5.15.216
Status unaffected
Version <= 6.1.*
Version 6.1.183
Status unaffected
Version <= 6.6.*
Version 6.6.151
Status unaffected
Version <= 6.12.*
Version 6.12.103
Status unaffected
Version <= 6.18.*
Version 6.18.44
Status unaffected
Version <= 7.1.*
Version 7.1.8
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.07
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/d328175045176f85c15c369bd21dc551351e7935
https://git.kernel.org/stable/c/832069bec79cf6f903441c5769d3cdba95d0af33
https://git.kernel.org/stable/c/96ad57d31763559d376416cdf3bf5ae79bbbebec
https://git.kernel.org/stable/c/76963b04b2d1c648d69949d8dd521e1ff7f40b51
https://git.kernel.org/stable/c/1b46fe9dc8f8de59310f37e6c5e5c0e05ded46c3
https://git.kernel.org/stable/c/009240d057e26831cc925feaba4c490209c1d0ba
https://git.kernel.org/stable/c/689a2ea75434131d0af58aeb7d51fde40e858b4d