CVE-2026-90101

Summary

In the Linux kernel, the following vulnerability has been resolved:

bnxt_en: Fix call to hardware monitoring event handler

The first parameter of hwmon_notify_event() is supposed to be the hardware monitoring device. The bnxt driver calls it with the platform device as first parameter instead. This API break results in undefined behavior and may result in a crash.

Pass the hardware monitoring device as parameter instead to fix the problem.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxa19b4801457b0806c0153dc344f548c6f8615896 < e3cad8389a72b8a309b5689c1683310126b0d7daaffected
LinuxLinuxa19b4801457b0806c0153dc344f548c6f8615896 < 001ff5d8e68aacd91768b824b930dd7e68db6688affected
LinuxLinuxa19b4801457b0806c0153dc344f548c6f8615896 < b17907ef665bc76a495a8f909f74656d3f32b7a2affected
LinuxLinuxa19b4801457b0806c0153dc344f548c6f8615896 < 622d698df4239fef3e0eb51fe59f4198f957f28aaffected
LinuxLinux6.7affected
LinuxLinux0 < 6.7unaffected
LinuxLinux6.12.110 <= 6.12.*unaffected
LinuxLinux6.18.52 <= 6.18.*unaffected
LinuxLinux7.2.6 <= 7.2.*unaffected
LinuxLinux7.3-rc1 <= *unaffected

Weaknesses

References