PT-2026-61355 · Linux · Linux
CVE-2026-64038
·
Published
2026-07-19
·
Updated
2026-07-19
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
In the Linux kernel, the following vulnerability has been resolved:
hwmon: (lm90) Stop work before releasing hwmon device
Sashiko reports:
In lm90 probe(), the devm action to cancel the alert work and report work
(lm90 restore conf) is registered in lm90 init client() before
devm hwmon device register with info() is called.
Because devm executes cleanup actions in reverse order during module
unbind or probe failure, the hwmon device is unregistered and freed first.
If lm90 alert work() or lm90 report alarms() runs in the window between
the hwmon device being freed and the delayed works being cancelled,
lm90 update alarms() will dereference the freed data->hwmon dev here.
Fix the problem by canceling the workers separately after registering
the hwmon device and before registering the interrupt handler. This ensures
that the workers are canceled after interrupts are disabled and before
the hwmon device is released. Add "shutdown" flag to indicate that device
shutdown is in progress to prevent workers from being re-armed.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux