Linux Kernel Vulnerability in hwmon Affects Fan Speed Functionality

CVE-2026-74546

What is CVE-2026-74546?

A vulnerability in the Linux kernel's hwmon subsystem can cause a divide-by-zero crash when reading fan speed data. This occurs if the fan data value becomes zero after the validation check but before the conversion to RPM, resulting in a race condition during concurrent updates. The issue has been mitigated by ensuring fan data is read only once to prevent this timing-related attack vector.

References