CVE-2026-74546: hwmon: (adt7470) Fix divide-by-zero TOCTOU crash in fan speed read

Published Aug 15, 2026

Updated

In the Linux kernel, the following vulnerability has been resolved:

hwmon: (adt7470) Fix divide-by-zero TOCTOU crash in fan speed read

If the fan data becomes 0 between the FANDATAVALID() check and the FANPERIODTORPM() conversion, it will result in a divide-by-zero crash due to a race with a concurrent update of the cached fan value.

Fix a TOCTOU issue by reading fan data once.

Affected Software

1 affected component

Linux Linux kernel (hwmon adt7470)

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Linux kernel hwmon (adt7470) to a version that resolves this vulnerability.
Patch hwmon: (adt7470) Fix divide-by-zero TOCTOU crash in fan speed read

Event History

Aug 15, 2026

CVE Published

via MITRE·12:27 PM

Data Sourced

via MITRE·12:27 PM

Description

Frequently Asked Questions

What is the severity of CVE-2026-74546?

CVE-2026-74546 has a severity rating of 27.

How do I fix CVE-2026-74546?

To fix CVE-2026-74546, update your Linux kernel to the latest version where this vulnerability has been patched.

What systems are affected by CVE-2026-74546?

CVE-2026-74546 affects systems running the Linux kernel with the hwmon adt7470 driver.

What type of vulnerability is CVE-2026-74546?

CVE-2026-74546 is a divide-by-zero vulnerability related to fan speed data processing.

What impact does CVE-2026-74546 have on system stability?

CVE-2026-74546 can lead to a crash in the system when the fan data becomes zero.