Denial of Service Vulnerability in Linux Kernel's ADT7470 Temperature Sensor Management

CVE-2026-74547

What is CVE-2026-74547?

In the Linux kernel, a vulnerability in the ADT7470 temperature sensor driver allows for a denial of service condition. When the userspace sets the 'auto_update_interval' to 0, a background thread can enter a busy-loop, overloading the CPU and flooding the I2C bus. This is exacerbated when 'num_temp_sensors' is also set to 0, leading to unbounded operations that disrupt system stability. The vulnerability is addressed by adjusting the minimum update interval to ensure a controlled sleep period, thereby preventing excessive bus transactions.

References