CVE-2026-74546hwmon: (adt7470) Fix divide-by-zero TOCTOU crash in fan speed read
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: hwmon: (adt7470) Fix divide-by-zero TOCTOU crash in fan speed read If the fan data becomes 0 between the FAN_DATA_VALID() check and the FAN_PERIOD_TO_RPM() conversion, it will result in a divide-by-zero crash due to a race with a concurrent update of the cached fan value. Fix a TOCTOU issue by reading fan data once.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 19, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from fc958a61ff6d34a0ec42744d3ff524ee202b2e9f before 689a2ea75434131d0af58aeb7d51fde40e858b4d; from fc958a61ff6d34a0ec42744d3ff524ee202b2e9f before 009240d057e26831cc925feaba4c490209c1d0ba; from fc958a61ff6d34a0ec42744d3ff524ee202b2e9f before d328175045176f85c15c369bd21dc551351e7935; from fc958a61ff6d34a0ec42744d3ff524ee202b2e9f before 832069bec79cf6f903441c5769d3cdba95d0af33; from fc958a61ff6d34a0ec42744d3ff524ee202b2e9f before 96ad57d31763559d376416cdf3bf5ae79bbbebec; from fc958a61ff6d34a0ec42744d3ff524ee202b2e9f before 76963b04b2d1c648d69949d8dd521e1ff7f40b51; from fc958a61ff6d34a0ec42744d3ff524ee202b2e9f before 1b46fe9dc8f8de59310f37e6c5e5c0e05ded46c3 | CNA record |
References
- https://git.kernel.org/stable/c/689a2ea75434131d0af58aeb7d51fde40e858b4d
- https://git.kernel.org/stable/c/009240d057e26831cc925feaba4c490209c1d0ba
- https://git.kernel.org/stable/c/d328175045176f85c15c369bd21dc551351e7935
- https://git.kernel.org/stable/c/832069bec79cf6f903441c5769d3cdba95d0af33
- https://git.kernel.org/stable/c/96ad57d31763559d376416cdf3bf5ae79bbbebec
- https://git.kernel.org/stable/c/76963b04b2d1c648d69949d8dd521e1ff7f40b51
- https://git.kernel.org/stable/c/1b46fe9dc8f8de59310f37e6c5e5c0e05ded46c3
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.