https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 17:56:18 +0000 https://vulnerability.circl.lu/vuln/cve-2026-74552 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>hwmon: (lm90) Only report alarms if driver is ready</p> <p>Userspace can read sysfs attributes before driver registration is complete, immediately after devm_hwmon_device_register_with_info() has been called. At that time, data-&gt;hwmon_dev is not yet initialized. This can trigger a NULL pointer access since lm90_update_device() and with it lm90_update_alarms_locked() will be called. This call schedules report_work and lm90_report_alarms(), which passes the still-NULL data-&gt;hwmon_dev to hwmon_notify_event() and triggers a NULL pointer dereference.</p> <p>Fix the problem by only scheduling the report and alert workers data-&gt;hwmon_dev is set.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>hwmon: (lm90) Only report alarms if driver is ready</p> <p>Userspace can read sysfs attributes before driver registration is complete, immediately after devm_hwmon_device_register_with_info() has been called. At that time, data-&gt;hwmon_dev is not yet initialized. This can trigger a NULL pointer access since lm90_update_device() and with it lm90_update_alarms_locked() will be called. This call schedules report_work and lm90_report_alarms(), which passes the still-NULL data-&gt;hwmon_dev to hwmon_notify_event() and triggers a NULL pointer dereference.</p> <p>Fix the problem by only scheduling the report and alert workers data-&gt;hwmon_dev is set.</p> https://vulnerability.circl.lu/vuln/cve-2026-74552