CVE-2026-74546None▾ SunlitIn the Linux kernel, the following vulnerability has been resolved: hwmon: (adt7470) Fix divide-by-zero TOCTOU crash in fan speed read If the fan data becomes 0 between the FAN_DATA_VALID() check and the FAN_PERIOD_TO_RPM() conversion,…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Nov 6.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.2%
In the Linux kernel, the following vulnerability has been resolved:
hwmon: (adt7470) Fix divide-by-zero TOCTOU crash in fan speed read
If the fan data becomes 0 between the FAN_DATA_VALID() check and the FAN_PERIOD_TO_RPM() conversion, it will result in a divide-by-zero crash due to a race with a concurrent update of the cached fan value.
Fix a TOCTOU issue by reading fan data once.
Linux >= fc958a61ff6d34a0ec42744d3ff524ee202b2e9f < 689a2ea75434131d0af58aeb7d51fde40e858b4dLinux >= fc958a61ff6d34a0ec42744d3ff524ee202b2e9f < 009240d057e26831cc925feaba4c490209c1d0baLinux >= fc958a61ff6d34a0ec42744d3ff524ee202b2e9f < d328175045176f85c15c369bd21dc551351e7935Linux >= fc958a61ff6d34a0ec42744d3ff524ee202b2e9f < 832069bec79cf6f903441c5769d3cdba95d0af33Linux >= fc958a61ff6d34a0ec42744d3ff524ee202b2e9f < 96ad57d31763559d376416cdf3bf5ae79bbbebecLinux >= fc958a61ff6d34a0ec42744d3ff524ee202b2e9f < 76963b04b2d1c648d69949d8dd521e1ff7f40b51Linux >= fc958a61ff6d34a0ec42744d3ff524ee202b2e9f < 1b46fe9dc8f8de59310f37e6c5e5c0e05ded46c3Linux 5.15Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-99284Nonenet: skbuff: propagate shared-frag marker in skb_zerocopy()
CVE-2026-99283Nonenetfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets
CVE-2026-99272Nonesmb: client: validate the data area in SMB2_read()
CVE-2026-99271NoneALSA: line6: Clear prev_fbuf on capture buffer release
CVE-2026-99273Noneksmbd: reserve space for the UTF-16 terminator in stream info
CVE-2026-99275Nonesmb: client: reject short SESSION_SETUP responses