CVE-2026-74546

Not scored yetLast modified Nov 6, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

hwmon: (adt7470) Fix divide-by-zero TOCTOU crash in fan speed read

If the fan data becomes 0 between the FAN_DATA_VALID() check and the FAN_PERIOD_TO_RPM() conversion, it will result in a divide-by-zero crash due to a race with a concurrent update of the cached fan value.

Fix a TOCTOU issue by reading fan data once.

Metrics

No CVSS score has been published yet.

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= fc958a61ff6d34a0ec42744d3ff524ee202b2e9f, < 689a2ea75434131d0af58aeb7d51fde40e858b4d; >= fc958a61ff6d34a0ec42744d3ff524ee202b2e9f, < 009240d057e26831cc925feaba4c490209c1d0ba; >= fc958a61ff6d34a0ec42744d3ff524ee202b2e9f, < d328175045176f85c15c369bd21dc551351e7935; >= fc958a61ff6d34a0ec42744d3ff524ee202b2e9f, < 832069bec79cf6f903441c5769d3cdba95d0af33; >= fc958a61ff6d34a0ec42744d3ff524ee202b2e9f, < 96ad57d31763559d376416cdf3bf5ae79bbbebec; >= fc958a61ff6d34a0ec42744d3ff524ee202b2e9f, < 76963b04b2d1c648d69949d8dd521e1ff7f40b51; >= fc958a61ff6d34a0ec42744d3ff524ee202b2e9f, < 1b46fe9dc8f8de59310f37e6c5e5c0e05ded46c3
LinuxLinux5.15

References

Timeline

Published
Aug 15, 2026
Last modified
Nov 6, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-74547In the Linux kernel, the following vulnerability has been resolved: hwmon: (adt7470) Fix busy-loop and I2C flooding in update thread When CVE-2026-745487.8In the Linux kernel, the following vulnerability has been resolved: forcedeth: fix UAF of txrx_stats in nv_remove nv_remove() frees the peCVE-2026-745497.8In the Linux kernel, the following vulnerability has been resolved: hwmon: (nct6775-core) Prevent access to unsupported weight registers SCVE-2026-74557.8A maliciously crafted FLT file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor may CVE-2026-745507.5In the Linux kernel, the following vulnerability has been resolved: net: do not send ICMP/NDISC Redirects when peer allocation fails When CVE-2026-745517.8In the Linux kernel, the following vulnerability has been resolved: hwmon: (nzxt-smart2) DMA-align output buffer Sashiko reports: When seCVE-2026-74552In the Linux kernel, the following vulnerability has been resolved: hwmon: (lm90) Only report alarms if driver is ready Userspace can readCVE-2026-74553In the Linux kernel, the following vulnerability has been resolved: hwmon: (nct6775-core) Fix number of temperature registers for NCT6116 CVE-2026-745548.8In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix out-of-bounds clear_bit in ath12k_mac_dp_peer_cleanupCVE-2026-74555In the Linux kernel, the following vulnerability has been resolved: scsi: libsas: Fix HA resume deadlock and hisi_sas disk-wake race CommiCVE-2026-745569.8In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection CVE-2026-745577.5In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer iscsi_s
CVE-2026-74546: Unscored | Vulnix