CVE-2026-98000

hwmon: Fix potential UAF in pec_store

State
Published
Severity
Not scored
Published
Sep 25, 2026
Updated
Oct 19, 2026
Reserved
Sep 25, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

hwmon: Fix potential UAF in pec_store

Sashiko reports:

In pec_store(), a guard(mutex)(&hwdev->lock) is taken. If the chip write operation returns an error other than -EOPNOTSUPP, the code jumps to the put label, which calls put_device(hdev). If this drops the final reference, the device is freed. When the function then returns, the guard cleanup function runs and attempts to unlock the freed mutex.

Use scoped_guard() instead of guard() to avoid the problem.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 3ad2a7b9b15d5072139a20be84adb36776eb6c9b to before 8afab57bcdbc2186f325972e777880ac5a220f4fAffected
  • 3ad2a7b9b15d5072139a20be84adb36776eb6c9b to before 01dd8b4fc2cf83c66565c0f382fb1841e9000a89Affected
  • 3ad2a7b9b15d5072139a20be84adb36776eb6c9b to before 354ccc99b2dc8ba0cf6d4de34e520bcf6ecca5c2Affected
LinuxLinux
  • 6.18Affected
  • before 6.18Not affected
  • 6.18.53 through 6.18.*Not affected
  • 7.2.7 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.