---
id: CVE-2024-26730
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  hwmon: (nct6775) Fix access to temperature configuration registers

  The number of temperature configuration registers does
  not always match the total number of temperat…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  hwmon: (nct6775) Fix access to temperature configuration registers

  The number of temperature configuration registers does
  not always match the total number of temperat…
severity: high
cvss: 7.3
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H'
cwe:
  - CWE-787
  - CWE-125
vendor: linux
product: linux_kernel
affected:
  - 'linux_kernel >= 6.6, < 6.6.19'
  - 'linux_kernel >= 6.7, < 6.7.7'
  - linux_kernel = 6.6.19
  - linux_kernel = 6.8
patched:
  - linux_kernel 6.7.7
published: '2024-04-03'
updated: '2026-08-04'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2024-26730'
references:
  - url: 'https://git.kernel.org/stable/c/c196387820c9214c5ceaff56d77303c82514b8b1'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/d56e460e19ea8382f813eb489730248ec8d7eb73'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/f006c45a3ea424f8f6c8e4b9283bc245ce2a4d0f'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/c196387820c9214c5ceaff56d77303c82514b8b1'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/d56e460e19ea8382f813eb489730248ec8d7eb73'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/f006c45a3ea424f8f6c8e4b9283bc245ce2a4d0f'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-26730.json
  - url: 'https://access.redhat.com/security/cve/CVE-2024-26730'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2273254'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2024-26730'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2024-26730'
  - url: >-
      https://lore.kernel.org/linux-cve-announce/2024040358-CVE-2024-26730-4c35@gregkh/T
tags:
  - nvd
  - csaf
  - vex
  - red-hat
epss: 0.0025
epssPercentile: 0.16267
ingestedAt: '2026-08-05T10:46:48.265Z'
scores:
  nvd: 7.3
  vendor: 5.5
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

hwmon: (nct6775) Fix access to temperature configuration registers

The number of temperature configuration registers does
not always match the total number of temperature registers.
This can result in access errors reported if KASAN is enabled.

BUG: KASAN: global-out-of-bounds in nct6775_probe+0x5654/0x6fe9 nct6775_core

## Affected

- `linux_kernel >= 6.6, < 6.6.19`
- `linux_kernel >= 6.7, < 6.7.7`
- `linux_kernel = 6.6.19`
- `linux_kernel = 6.8`

## Remediation

Upgrade past the affected range:

- `linux_kernel 6.7.7`

## Vendor advisories

- **Red Hat VEX** · Moderate · updated 2026-10-16 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-26730.json)