Out-of-bounds read in Linux kernel - CVE-2026-74549

Vulnerability details

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to out-of-bounds read in nct6775_update_pwm() in the nct6775-core hwmon driver when iterating over pwm channels for nct6116 weight-control registers. A local user can trigger access to unsupported weight registers to cause a denial of service.

The issue affects nct6116 configurations where bits 3 or 4 of has_pwm are set, causing out-of-bounds values to be used as hardware register addresses for subsequent read and write operations.

Affected software

How to mitigate CVE-2026-74549

External References

• https://git.kernel.org/stable/c/1b722740ac5c2b2070f9ba922f4e0f227faf0246
• https://git.kernel.org/stable/c/25b528816f5d83be5236dc182692369e8c9402b0
• https://git.kernel.org/stable/c/4ad2972ef0e1bd1018ad7a72661a4636ed7daecc
• https://git.kernel.org/stable/c/689082a4cb166a7ae9729f7b12339e69fdad6c52
• https://git.kernel.org/stable/c/d0b704e569ac3b8416d8e02270cdc9bf830ed395

Related Security Bulletins

• Out-of-bounds read in Linux kernel hwmon driver
• Debian update for linux