CVE-2026-43165
Awaiting Analysis Awaiting Analysis - Queue
Resource Leak in Linux Kernel hwmon nct7363 Driver

Publication date: 2026-05-06

Last updated on: 2026-05-06

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: hwmon: (nct7363) Fix a resource leak in nct7363_present_pwm_fanin When calling of_parse_phandle_with_args(), the caller is responsible to call of_node_put() to release the reference of device node. In nct7363_present_pwm_fanin, it does not release the reference, causing a resource leak.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-05-06
Last Modified
2026-05-06
Generated
2026-06-16
AI Q&A
2026-05-06
EPSS Evaluated
2026-06-15
NVD
CVE-2026-43165
EUVD
EUVD-2026-27724
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Impact Analysis

The impact of this vulnerability is a resource leak in the kernel, which could lead to inefficient use of system resources over time. While it may not directly cause immediate system failure or security breach, continuous leaks can degrade system performance or stability.

Executive Summary

This vulnerability is a resource leak in the Linux kernel's hardware monitoring driver for the nct7363 chip. Specifically, when the function of_parse_phandle_with_args() is called, the caller must release the reference to the device node by calling of_node_put(). In the nct7363_present_pwm_fanin function, this release was not done, causing a resource leak.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-43165. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart