CVE-2026-74604

HighCVSS 8.4/10Last modified Oct 16, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

Revert "thermal/drivers/hwmon: Cleanup coding style a bit"

Revert commit 030a48b0f6ce ("thermal/drivers/hwmon: Cleanup coding style a bit") that introduced a use-after-free into the error path of thermal_add_hwmon_sysfs() by removing a valid check from it.

Metrics

CVSS 3.1 8.4/10CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 030a48b0f6ce393d78b8d33debb1e2043b8cc156, < 2434f4765da8ccd7ef31be88b86f1bfa2e95be11; >= 030a48b0f6ce393d78b8d33debb1e2043b8cc156, < b4c01ae6dd56d9dfd96bd1b29c28afa8fa06b366; >= 030a48b0f6ce393d78b8d33debb1e2043b8cc156, < 999e573212d5f1debf073c68be35e55bbfad12fc; >= 030a48b0f6ce393d78b8d33debb1e2043b8cc156, < 6a48ee9a5bda0f8ee501f9bef159fb9f39ff519a; >= 030a48b0f6ce393d78b8d33debb1e2043b8cc156, < 8d34019d1413629a434a7e8d9f91c76d256196a0; >= 030a48b0f6ce393d78b8d33debb1e2043b8cc156, < 6b446d335ba16e93a266dd77adf1ba51abc82df4; >= 030a48b0f6ce393d78b8d33debb1e2043b8cc156, < ff8da20b6f47c48d46e47f93f7a59e2d56ee9107
LinuxLinux5.11

References

Timeline

Published
Aug 22, 2026
Last modified
Oct 16, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-746057.8In the Linux kernel, the following vulnerability has been resolved: eventfs: Use children field for rcu head and add memory barriers When CVE-2026-746067.8In the Linux kernel, the following vulnerability has been resolved: eventfs: Fix use-after-free in eventfs_remove_rec() eventfs_remove_recCVE-2026-746078.8In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Serialize accesses to the owner and mirror list with separateCVE-2026-746089.8In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix use-after-free in cifs_try_adding_channels() cifs_tryCVE-2026-746097.8In the Linux kernel, the following vulnerability has been resolved: tipc: read le->link under the node lock in tipc_node_link_down() tipc_CVE-2026-74617.2Improper neutralization of inputs used in an OS command in the FSx Windows File Server volume mounting component in Amazon ECS Agent on WindCVE-2026-746107.8In the Linux kernel, the following vulnerability has been resolved: tls: don't leave a full plaintext sk_msg ring unpushed When the copy pCVE-2026-746119.8In the Linux kernel, the following vulnerability has been resolved: tls: rx: restore msg_iter before TLS 1.3 optimistic retry tls_decrypt_CVE-2026-7461210.0In the Linux kernel, the following vulnerability has been resolved: veth: fix skb length accounting after XDP frag adjustment veth exposesCVE-2026-746137.8In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: avoid refilling the RX queue after teardown Commit b9175CVE-2026-746148.4In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: read virtqueues under worker locks Commit bd50c5dc182b (CVE-2026-746158.8In the Linux kernel, the following vulnerability has been resolved: vxlan: do not arm the ageing timer on a device that is down vxlan_chan
CVE-2026-74604: High severity, CVSS 8.4 | Vulnix