-

CVE-2026-74552

hwmon: (lm90) Only report alarms if driver is ready

In the Linux kernel, the following vulnerability has been resolved:

hwmon: (lm90) Only report alarms if driver is ready

Userspace can read sysfs attributes before driver registration is complete,
immediately after devm_hwmon_device_register_with_info() has been called.
At that time, data->hwmon_dev is not yet initialized. This can trigger
a NULL pointer access since lm90_update_device() and with it
lm90_update_alarms_locked() will be called. This call schedules
report_work and lm90_report_alarms(), which passes the still-NULL
data->hwmon_dev to hwmon_notify_event() and triggers a NULL pointer
dereference.

Fix the problem by only scheduling the report and alert workers
data->hwmon_dev is set.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version f6d0775119fb905fb02eafa98d575cf8ee792d46
Version < 31ce62d36d859423dc39f9902f7c4c307b2e00e3
Status affected
Version f6d0775119fb905fb02eafa98d575cf8ee792d46
Version < 4eed33c7db5c0c573928d28d8a2c003642c679b8
Status affected
Version f6d0775119fb905fb02eafa98d575cf8ee792d46
Version < 70d9a71aa407044d70b50d356b6decf6659c4d56
Status affected
Version f6d0775119fb905fb02eafa98d575cf8ee792d46
Version < 075fce376cf852db9293481edce07c181a9b1f46
Status affected
Version f6d0775119fb905fb02eafa98d575cf8ee792d46
Version < f0b791a006512a48b6348494cb6960598fa99a58
Status affected
Version f6d0775119fb905fb02eafa98d575cf8ee792d46
Version < aa9429edf9fc0e90d6f4da19ea4b5495a54ab117
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.0
Status affected
Version 0
Version < 6.0
Status unaffected
Version <= 6.1.*
Version 6.1.183
Status unaffected
Version <= 6.6.*
Version 6.6.151
Status unaffected
Version <= 6.12.*
Version 6.12.103
Status unaffected
Version <= 6.18.*
Version 6.18.44
Status unaffected
Version <= 7.1.*
Version 7.1.8
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.07
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/4eed33c7db5c0c573928d28d8a2c003642c679b8
https://git.kernel.org/stable/c/70d9a71aa407044d70b50d356b6decf6659c4d56
https://git.kernel.org/stable/c/075fce376cf852db9293481edce07c181a9b1f46
https://git.kernel.org/stable/c/f0b791a006512a48b6348494cb6960598fa99a58
https://git.kernel.org/stable/c/aa9429edf9fc0e90d6f4da19ea4b5495a54ab117
https://git.kernel.org/stable/c/31ce62d36d859423dc39f9902f7c4c307b2e00e3