SB20260816168 - Out-of-bounds read in Linux kernel hwmon driver

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB20260816168

SB20260816168 - Out-of-bounds read in Linux kernel hwmon driver

Published: August 16, 2026

Security Bulletin ID SB20260816168
CSH Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Denial of service

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Out-of-bounds read (CVE-ID: CVE-2026-74553)

CWE-ID: CWE-125 - Out-of-bounds read

CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a local attacker to cause a denial of service.

The vulnerability exists due to an out-of-bounds read in the nct6775_probe function in the nct6775-core hwmon driver when probing NCT6116 hardware. A local attacker can trigger driver initialization to cause a denial of service.

The issue is caused by using the size of the NCT6106 temperature register array for NCT6116 even though NCT6116 only provides three temperature source and temperature source configuration registers.


Remediation

Install update from vendor's website.

References