CVE-2026-74604: Revert "thermal/drivers/hwmon: Cleanup coding style a bit"
In the Linux kernel, the following vulnerability has been resolved:
Revert "thermal/drivers/hwmon: Cleanup coding style a bit"
Revert commit 030a48b0f6ce ("thermal/drivers/hwmon: Cleanup coding style a bit") that introduced a use-after-free into the error path of thermaladdhwmonsysfs() by removing a valid check from it.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.152.1-1
Event History
Frequently Asked Questions
When can the use-after-free occur?
It occurs in the error path of thermal_add_hwmon_sysfs(). The affected change removed a valid check from that path.
What code change resolves the issue?
The vulnerability is resolved by reverting commit 030a48b0f6ce, "thermal/drivers/hwmon: Cleanup coding style a bit." The provided stable-kernel references identify commits carrying that revert.