CVE-2026-23323

Severity CVSS v4.0:
Pending analysis
Type:
CWE-787 Out-of-bounds Write
Publication date:
25/03/2026
Last modified:
23/04/2026

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> hwmon: (macsmc) Fix regressions in Apple Silicon SMC hwmon driver<br /> <br /> The recently added macsmc-hwmon driver contained several critical<br /> bugs in its sensor population logic and float conversion routines.<br /> <br /> Specifically:<br /> - The voltage sensor population loop used the wrong prefix ("volt-"<br /> instead of "voltage-") and incorrectly assigned sensors to the<br /> temperature sensor array (hwmon-&gt;temp.sensors) instead of the<br /> voltage sensor array (hwmon-&gt;volt.sensors). This would lead to<br /> out-of-bounds memory access or data corruption when both temperature<br /> and voltage sensors were present.<br /> - The float conversion in macsmc_hwmon_write_f32() had flawed exponent<br /> logic for values &gt;= 2^24 and lacked masking for the mantissa, which<br /> could lead to incorrect values being written to the SMC.<br /> <br /> Fix these issues to ensure correct sensor registration and reliable<br /> manual fan control.<br /> <br /> Confirm that the reported overflow in FIELD_PREP is fixed by declaring<br /> macsmc_hwmon_write_f32() as __always_inline for a compile test.

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.19.1 (including) 6.19.7 (excluding)
cpe:2.3:o:linux:linux_kernel:6.19:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc7:*:*:*:*:*:*