PT-2026-27688 · Linux · Linux Kernel

Published 2026-01-01 · Updated 2026-03-28 · CVE-2026-23323

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel’s Apple Silicon SMC hwmon driver contained bugs in its sensor population logic and float conversion routines. Specifically, the voltage sensor population loop used an incorrect prefix, leading to incorrect sensor assignments and potential out-of-bounds memory access or data corruption when both temperature and voltage sensors were present. The float conversion in macsmc hwmon write f32() had flawed exponent logic for values greater than or equal to 2^24 and lacked mantissa masking, potentially leading to incorrect values being written to the SMC. These issues could prevent correct sensor registration and reliable manual fan control.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2026-23323

Affected Products

Linux Kernel

References · 14

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23323.json · Exploit
• https://ubuntu.com/security/CVE-2026-23323 · Vendor Advisory
• https://git.kernel.org/stable/c/625ef35b70d3883fb9a41cd5a988e64dd3e447d6 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-23323 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-23323 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-23323 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-23323 · Vendor Advisory
• https://git.kernel.org/stable/c/5dd69b864911ae3847365e8bafe7854e79fbeecb · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-23323 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-23323 · Vendor Advisory
• https://git.kernel.org/linus/5dd69b864911ae3847365e8bafe7854e79fbeecb · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://twitter.com/CVEarity/status/2037926864711524843 · Twitter Post
• https://twitter.com/CVEnew/status/2036763526627287196 · Twitter Post