Out-of-Bounds Vulnerability in Linux Kernel Affecting NCT6116 Sensor

CVE-2026-74553

What is CVE-2026-74553?

The Linux kernel contains a vulnerability in its handling of temperature registers for the NCT6116 sensor. Specifically, the implementation incorrectly referenced the number of temperature registers, leading to a global out-of-bounds access. The system attempts to read from six registers while the NCT6116 only supports three, raising a KASAN (Kernel Address Sanitizer) report. The issue is resolved by hard-coding the register count to three and eliminating the unnecessary array for the NCT6116 temperature source registers, thus preventing any potential exploits.

References