CVE-2026-98197: hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove
hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
In the Linux kernel hwmon w83791d driver's normal remove/teardown path, remove the w83791d_group_fanpwm45 sysfs group as well as w83791d_group.
Event History
Frequently Asked Questions
Which systems are exposed to this issue?
Systems using the Linux kernel w83791d hardware-monitoring driver are exposed only when the fan/PWM 4-5 pins are configured for fan/PWM use rather than GPIO, causing the optional fan/PWM 4-5 sysfs group to be created.
What must occur for the stale sysfs files to become a problem?
The w83791d driver must be unbound or removed after creating the optional fan/PWM 4-5 sysfs group. The leftover sysfs callbacks can then access driver data that was released during unbind.
Is the default configuration affected?
The provided information does not establish a default configuration. It identifies the affected condition as fan/PWM 4-5 pins not being used as GPIO.
What can be done if the fix cannot be applied immediately?
Avoid unbinding or removing the w83791d driver on affected systems while the optional fan/PWM 4-5 sysfs group exists. This prevents the normal teardown path from leaving those files attached to released driver data.