CVE-2026-80695

hwmon: (sht3x) Fix unaligned accesses

State
Published
Severity
Not scored
Published
Aug 28, 2026
Updated
Oct 30, 2026
Reserved
Aug 26, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

hwmon: (sht3x) Fix unaligned accesses

Sashiko reports:

In sht3x_update_client(), the 16-bit temperature and humidity values are extracted from a stack-allocated byte array using be16_to_cpup(). The pointers passed to this function are calculated as buf and buf + 3. Since the difference between the two pointers is an odd number of bytes, at least one of them is guaranteed to be at an unaligned offset.

This will trigger an alignment fault on strict-alignment architectures such as ARMv5 or SPARC, resulting in a kernel panic.

Fix the problem by using get_unaligned_be16() instead of be16_to_cpup(), and put_unaligned_be16() instead of cpu_to_be16().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 7c84f7f80d6fcea36246b793d06c3555ca53ddcd to before 3eed79d882c98f1805dc537ed393d8e257a46017Affected
  • 7c84f7f80d6fcea36246b793d06c3555ca53ddcd to before c41fa44be44e452e7aec2081195488d685026761Affected
  • 7c84f7f80d6fcea36246b793d06c3555ca53ddcd to before 81529add4a2e3cca9240e0e2342973d62f88f02eAffected
  • 7c84f7f80d6fcea36246b793d06c3555ca53ddcd to before c498adfd4c3e85306ccdc19b76e639bfc215f0e7Affected
  • 7c84f7f80d6fcea36246b793d06c3555ca53ddcd to before 1fb41650bc3e14d2a5ddb4bb25e96811e5afe881Affected
  • 7c84f7f80d6fcea36246b793d06c3555ca53ddcd to before f46d5ab43a572b84773015a76966f5da56fc1748Affected
LinuxLinux
  • 4.8Affected
  • before 4.8Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.160 through 6.6.*Not affected
  • 6.12.103 through 6.12.*Not affected
  • 6.18.44 through 6.18.*Not affected
  • 7.1.8 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.