Out-of-bounds read in Linux kernel - CVE-2026-74553
Published: August 16, 2026
Vulnerability identifier: #VU143232
CSH Severity: Low
CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-74553
CWE-ID: CWE-125
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local attacker to cause a denial of service.
The vulnerability exists due to an out-of-bounds read in the nct6775_probe function in the nct6775-core hwmon driver when probing NCT6116 hardware. A local attacker can trigger driver initialization to cause a denial of service.
The issue is caused by using the size of the NCT6106 temperature register array for NCT6116 even though NCT6116 only provides three temperature source and temperature source configuration registers.
Affected software
Linux kernel
Debian Linux
linux (Debian package)
Debian Linux
linux (Debian package)
How to mitigate CVE-2026-74553
Install security update from vendor's repository.
Linux kernel - update to 7.0 rc3
linux (Debian package) - update to 6.12.105-1
linux (Debian package) - update to 6.12.105-1
External References
- https://git.kernel.org/stable/c/16c45bb3d3434cfb9ea264fa52090d0823240465
- https://git.kernel.org/stable/c/9a87dfaa05c3c9d3a4cdb7eafc1ab4abc84f6eef
- https://git.kernel.org/stable/c/a42d727dae5701deac8bb2a75effadae7d681153
- https://git.kernel.org/stable/c/a7f47f5246cd6c3199e5fb2d4109cc53e766e3f0
- https://git.kernel.org/stable/c/b0e8adb2ccb43009796897ced09f91636685c9d3