Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

CVE-2026-64213

Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
24/07/2026
Última modificación:
30/07/2026

Descripción

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> hwmon: (lm90) Add lock protection to lm90_alert<br /> <br /> Sashiko reports:<br /> <br /> lm90_alert() executes in the smbus alert context and calls<br /> lm90_update_confreg() to disable the hardware alert line, without<br /> acquiring hwmon_lock.<br /> <br /> Concurrently, sysfs write operations (such as lm90_write_convrate) hold<br /> the hwmon_lock, temporarily modify data-&gt;config, and then restore it.<br /> <br /> If an alert interrupt occurs concurrently with a sysfs write, the sysfs<br /> path will overwrite the alert handler&amp;#39;s modifications to data-&gt;config<br /> and the hardware register.<br /> <br /> This unintentionally re-enables the hardware alert line while the alarm is<br /> still active, causing an interrupt storm.<br /> <br /> Add the missing lock to lm90_alert() to solve the problem.

Impacto