CVE-2026-68340
Received Received - Intake

Linux Kernel hwmon OCC Poll Response Validation Flaw

Publication date: 2026-08-10

Last updated on: 2026-08-10

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: hwmon: occ: validate poll response sensor blocks The OCC poll response parser walks a counted list of sensor data blocks. It used the static backing-array capacity as the parse boundary, but a transport response makes only data_length bytes current and valid. A truncated response can therefore make the parser consume a block header or block extent outside the current response. Use data_length as the parent boundary, prove the fixed poll header and each current block header before reading them, and prove the complete block before advancing. Keep parsed sensor metadata local until the complete response has passed validation, then publish it. Propagate malformed-response errors before publishing the OCC as active.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-10
Last Modified
2026-08-10
Generated
2026-08-10
AI Q&A
2026-08-10
EPSS Evaluated
N/A
NVD
CVE-2026-68340
EUVD
EUVD-2026-55441

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a flaw in the OCC poll response parser. The parser incorrectly uses a static array capacity as a boundary instead of the actual data length from the response. A truncated response could cause the parser to read outside the valid data range, potentially accessing invalid memory or block headers.

Detection Guidance

This vulnerability is specific to the Linux kernel's hwmon OCC (On-Chip Controller) subsystem. Detection requires checking kernel logs for OCC-related errors or examining the kernel version for affected releases. Commands like dmesg | grep occ or journalctl -k | grep occ may reveal issues. Ensure your kernel is updated to a patched version.

Impact Analysis

This vulnerability could lead to system instability, crashes, or unexpected behavior due to memory corruption or invalid memory access. An attacker with local access might exploit it to cause denial-of-service conditions or escalate privileges on affected systems.

Mitigation Strategies

Update the Linux kernel to the latest stable version that includes the fix for CVE-2026-68340. If immediate patching is not possible, consider disabling the OCC driver if not required, though this may impact hardware monitoring functionality.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-68340. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart