SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-74604

HIGH · CVSS 8.4 EPSS 0.14%

Source: NVD + CISA KEV + EPSS · Published 2026-08-22 · Last synced 2026-09-18

CyberRota Analysis

AI-Generated

A use-after-free vulnerability exists in the Linux kernel's thermal subsystem, specifically in the `thermal_add_hwmon_sysfs()` function due to a coding style cleanup that inadvertently removed a critical validity check. This flaw could lead to potential memory corruption, impacting system stability and security. Linux system administrators and developers should prioritize this issue to mitigate risks associated with system crashes or exploitation.

CVE
CVE-2026-74604
Severity
HIGH
CVSS
8.4
EPSS
0.14%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: Revert "thermal/drivers/hwmon: Cleanup coding style a bit" Revert commit 030a48b0f6ce ("thermal/drivers/hwmon: Cleanup coding style a bit") that introduced a use-after-free into the error path of thermal_add_hwmon_sysfs() by removing a valid check from it.