CVE-2026-64213

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
24/07/2026
Last modified:
30/07/2026

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> hwmon: (lm90) Add lock protection to lm90_alert<br /> <br /> Sashiko reports:<br /> <br /> lm90_alert() executes in the smbus alert context and calls<br /> lm90_update_confreg() to disable the hardware alert line, without<br /> acquiring hwmon_lock.<br /> <br /> Concurrently, sysfs write operations (such as lm90_write_convrate) hold<br /> the hwmon_lock, temporarily modify data-&gt;config, and then restore it.<br /> <br /> If an alert interrupt occurs concurrently with a sysfs write, the sysfs<br /> path will overwrite the alert handler&amp;#39;s modifications to data-&gt;config<br /> and the hardware register.<br /> <br /> This unintentionally re-enables the hardware alert line while the alarm is<br /> still active, causing an interrupt storm.<br /> <br /> Add the missing lock to lm90_alert() to solve the problem.

Impact