Back
CVE-2026-74604Revert "thermal/drivers/hwmon: Cleanup coding style a bit"
- 8.4HighCVSS base score
- 0.14%Exploitation in 30 daysEPSS · top 97% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
In the Linux kernel, the following vulnerability has been resolved: Revert "thermal/drivers/hwmon: Cleanup coding style a bit" Revert commit 030a48b0f6ce ("thermal/drivers/hwmon: Cleanup coding style a bit") that introduced a use-after-free into the error path of thermal_add_hwmon_sysfs() by removing a valid check from it.
Timeline
ID reserved
By Linux
- 7 days later
· 7 days later
Published
- 55 days later
· 55 days later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| LinuxCNA (assigner) | 3.1 | High8.4 | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVDNVD · Received | 3.1 | High8.4 | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
- EPSS (exploitation in 30 days)
- 0.14% · top 97% of all CVEs (12 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: total
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 8.4.
Affected products
- affected 030a48b0f6ce393d78b8d33debb1e2043b8cc156 – < 2434f4765da8ccd7ef31be88b86f1bfa2e95be11
- affected 030a48b0f6ce393d78b8d33debb1e2043b8cc156 – < b4c01ae6dd56d9dfd96bd1b29c28afa8fa06b366
- affected 030a48b0f6ce393d78b8d33debb1e2043b8cc156 – < 999e573212d5f1debf073c68be35e55bbfad12fc
- affected 030a48b0f6ce393d78b8d33debb1e2043b8cc156 – < 6a48ee9a5bda0f8ee501f9bef159fb9f39ff519a
- affected 030a48b0f6ce393d78b8d33debb1e2043b8cc156 – < 8d34019d1413629a434a7e8d9f91c76d256196a0
- affected 030a48b0f6ce393d78b8d33debb1e2043b8cc156 – < 6b446d335ba16e93a266dd77adf1ba51abc82df4
- affected 030a48b0f6ce393d78b8d33debb1e2043b8cc156 – < ff8da20b6f47c48d46e47f93f7a59e2d56ee9107
- affected 5.11
- unaffected < 5.11
- unaffected 5.15.216 – ≤ 5.15.*
- unaffected 6.1.183 – ≤ 6.1.*
- unaffected 6.6.152 – ≤ 6.6.*
- unaffected 6.12.104 – ≤ 6.12.*
- unaffected 6.18.45 – ≤ 6.18.*
- unaffected 7.1.9 – ≤ 7.1.*
- unaffected 7.2 – ≤ *
References
References7
- https://git.kernel.org/stable/c/2434f4765da8ccd7ef31be88b86f1bfa2e95be11 (opens in a new tab)
- https://git.kernel.org/stable/c/b4c01ae6dd56d9dfd96bd1b29c28afa8fa06b366 (opens in a new tab)
- https://git.kernel.org/stable/c/999e573212d5f1debf073c68be35e55bbfad12fc (opens in a new tab)
- https://git.kernel.org/stable/c/6a48ee9a5bda0f8ee501f9bef159fb9f39ff519a (opens in a new tab)
- https://git.kernel.org/stable/c/8d34019d1413629a434a7e8d9f91c76d256196a0 (opens in a new tab)
- https://git.kernel.org/stable/c/6b446d335ba16e93a266dd77adf1ba51abc82df4 (opens in a new tab)
- https://git.kernel.org/stable/c/ff8da20b6f47c48d46e47f93f7a59e2d56ee9107 (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2026-64541 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2026-74604)Record last updated .