PT-2026-64328 · Linux · Linux

CVE-2026-64213 · Publicado 2026-07-24 · Atualizado 2026-07-24

NVD

In the Linux kernel, the following vulnerability has been resolved:

hwmon: (lm90) Add lock protection to lm90 alert

Sashiko reports:

lm90 alert() executes in the smbus alert context and calls lm90 update confreg() to disable the hardware alert line, without acquiring hwmon lock.

Concurrently, sysfs write operations (such as lm90 write convrate) hold the hwmon lock, temporarily modify data->config, and then restore it.

If an alert interrupt occurs concurrently with a sysfs write, the sysfs path will overwrite the alert handler's modifications to data->config and the hardware register.

This unintentionally re-enables the hardware alert line while the alarm is still active, causing an interrupt storm.

Add the missing lock to lm90 alert() to solve the problem.

Identificadores relacionados

CVE-2026-64213

Produtos afetados

Linux

Referências · 4

• https://git.kernel.org/stable/c/873e919e3101063a7a75989510ccfc125a4391cf · Nota
• https://git.kernel.org/stable/c/b0b66aae8a94c3663d47e4000b0e81b89ce32186 · Nota
• https://git.kernel.org/stable/c/bed1fc32e0eb653806fa98afcf55f9a311fc4ce2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-64213 · Nota de Segurança