CVE-2026-74711 - hwmon: (pmbus) Fix type confusion in notification logic
Brief
CVE ID : CVE-2026-74711
Published : Aug. 22, 2026, 4:16 p. m.
- 4 hours, 54 minutes ago
Description : In the Linux kernel, the following vulnerability has been resolved:
hwmon: (pmbus) Fix type confusion in notification logic
Sashiko reports:
At the start of the loop in pmbus_notify(), the code unconditionally casts every attribute to a struct sensor_device_attribute:
drivers/hwmon/pmbus/pmbus_core. c:pmbus_notify() { for (i = 0; i num_attributes; i++) { struct device_attribute *da = to_dev_attr(data-group. attrs[i]); struct sensor_device_attribute *attr = to_sensor_dev_attr(da); int index = attr-index; ... }