CVE-2026-74604

Summary

In the Linux kernel, the following vulnerability has been resolved:

Revert "thermal/drivers/hwmon: Cleanup coding style a bit"

Revert commit 030a48b0f6ce ("thermal/drivers/hwmon: Cleanup coding style a bit") that introduced a use-after-free into the error path of thermal_add_hwmon_sysfs() by removing a valid check from it.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux030a48b0f6ce393d78b8d33debb1e2043b8cc156 < 2434f4765da8ccd7ef31be88b86f1bfa2e95be11affected
LinuxLinux030a48b0f6ce393d78b8d33debb1e2043b8cc156 < b4c01ae6dd56d9dfd96bd1b29c28afa8fa06b366affected
LinuxLinux030a48b0f6ce393d78b8d33debb1e2043b8cc156 < 999e573212d5f1debf073c68be35e55bbfad12fcaffected
LinuxLinux030a48b0f6ce393d78b8d33debb1e2043b8cc156 < 6a48ee9a5bda0f8ee501f9bef159fb9f39ff519aaffected
LinuxLinux030a48b0f6ce393d78b8d33debb1e2043b8cc156 < 8d34019d1413629a434a7e8d9f91c76d256196a0affected
LinuxLinux030a48b0f6ce393d78b8d33debb1e2043b8cc156 < 6b446d335ba16e93a266dd77adf1ba51abc82df4affected
LinuxLinux030a48b0f6ce393d78b8d33debb1e2043b8cc156 < ff8da20b6f47c48d46e47f93f7a59e2d56ee9107affected
LinuxLinux5.11affected
LinuxLinux0 < 5.11unaffected
LinuxLinux5.15.216 <= 5.15.*unaffected
LinuxLinux6.1.183 <= 6.1.*unaffected
LinuxLinux6.6.152 <= 6.6.*unaffected
LinuxLinux6.12.104 <= 6.12.*unaffected
LinuxLinux6.18.45 <= 6.18.*unaffected
LinuxLinux7.1.9 <= 7.1.*unaffected
LinuxLinux7.2 <= *unaffected

Weaknesses

References