Strix
75.7K

CVE-2026-74604

HIGHCVSS 8.4/10EPSS 0.14%

Last modified

CVE-2026-74604 is a high-severity vulnerability rated 8.4/10 on the CVSS scale. In the Linux kernel, the following vulnerability has been resolved: Revert "thermal/drivers/hwmon: Cleanup coding style a bit" Revert commit 030a48b0f6ce ("thermal/drivers/hwmon: Cleanup coding style a bit") that introduced a use-after-free into the error path of thermal_add_hwmon_sysfs() by removing a valid check from it.. EPSS estimates a 0.14% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: Revert "thermal/drivers/hwmon: Cleanup coding style a bit" Revert commit 030a48b0f6ce ("thermal/drivers/hwmon: Cleanup coding style a bit") that introduced a use-after-free into the error path of thermal_add_hwmon_sysfs() by removing a valid check from it.

Metrics

CVSS 3.1
8.4/10

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Probability
0.14%

2.8th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 030a48b0f6ce393d78b8d33debb1e2043b8cc156, < 2434f4765da8ccd7ef31be88b86f1bfa2e95be11; >= 030a48b0f6ce393d78b8d33debb1e2043b8cc156, < b4c01ae6dd56d9dfd96bd1b29c28afa8fa06b366; >= 030a48b0f6ce393d78b8d33debb1e2043b8cc156, < 999e573212d5f1debf073c68be35e55bbfad12fc; >= 030a48b0f6ce393d78b8d33debb1e2043b8cc156, < 6a48ee9a5bda0f8ee501f9bef159fb9f39ff519a; >= 030a48b0f6ce393d78b8d33debb1e2043b8cc156, < 8d34019d1413629a434a7e8d9f91c76d256196a0; >= 030a48b0f6ce393d78b8d33debb1e2043b8cc156, < 6b446d335ba16e93a266dd77adf1ba51abc82df4; >= 030a48b0f6ce393d78b8d33debb1e2043b8cc156, < ff8da20b6f47c48d46e47f93f7a59e2d56ee9107
LinuxLinux5.11

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-74604?
In the Linux kernel, the following vulnerability has been resolved: Revert "thermal/drivers/hwmon: Cleanup coding style a bit" Revert commit 030a48b0f6ce ("thermal/drivers/hwmon: Cleanup coding style a bit") that introduced a use-after-free into the error path of thermal_add_hwmon_sysfs() by removing a valid check from it.
How severe is CVE-2026-74604?
CVE-2026-74604 has a CVSS score of 8.4/10 (HIGH severity). The EPSS model estimates a 0.14% probability of exploitation in the next 30 days.
How do I fix CVE-2026-74604?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-74604?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST