CVE-2026-74553
Received Received - Intake

BaseFortify

Publication date: 2026-08-15

Last updated on: 2026-08-15

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: hwmon: (nct6775-core) Fix number of temperature registers for NCT6116 Unlike NCT6106, NCT6116 only has three temperature registers, and with it only three temperature source and temperature source configuration registers. The register addresses match those of NCT6106 and can be re-used. The code used a separate array to list the temperature source registers for NCT6116, but used the size of the NCT6106 register array to set the number of registers. The NCT6106 register array provides six addresses, while the temperature source register array for NCT6116 only provides three addresses. This causes a KASAN report. BUG: KASAN: global-out-of-bounds in nct6775_probe+0x936/0x46f0 [nct6775] Read of size 2 at addr ffffffffc19561a6 by task modprobe/954 ... Call Trace: dump_stack+0x7d/0xa7 print_address_description.constprop.0+0x1c/0x220 ? __kasan_kmalloc.constprop.0+0xc9/0xd0 ? __kmalloc_node_track_caller+0x194/0x5b0 ? nct6775_probe+0x936/0x46f0 [nct6775] ? nct6775_probe+0x936/0x46f0 [nct6775] ... Fix the problem by hard-coding the number of temperature and temperature configuration registers to three for NCT6116. Drop the unnecessary NCT6116_REG_TEMP_SOURCE array and re-use NCT6106_REG_TEMP_SOURCE.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-15
Last Modified
2026-08-15
Generated
2026-08-15
AI Q&A
2026-08-15
EPSS Evaluated
N/A
NVD
CVE-2026-74553
EUVD
EUVD-2026-59618

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux_kernel nct6775 *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a vulnerability in the Linux kernel's hwmon subsystem, specifically affecting the nct6775-core driver for NCT6116 hardware monitoring chips. The issue involves an incorrect number of temperature registers being used for NCT6116 devices. The code mistakenly used the register count from a different chip (NCT6106) which has six temperature registers, while NCT6116 only has three. This causes a buffer overflow detected by KASAN, leading to potential system instability or crashes.

Detection Guidance

This vulnerability is specific to the Linux kernel's hwmon subsystem for NCT6116 hardware monitoring chips. Detection requires checking kernel logs for KASAN reports related to nct6775_probe or examining the hardware monitoring chip model. No network detection is applicable as this is a local system issue.

Impact Analysis

If you are using a system with an NCT6116 hardware monitoring chip, this vulnerability could cause kernel crashes or instability when the system attempts to access temperature sensors. This might lead to unexpected reboots, data corruption, or denial of service conditions. Systems without NCT6116 chips are not affected.

Mitigation Strategies

Apply the latest kernel update that includes the fix for this issue. If you cannot update immediately, disable the NCT6116 hardware monitoring module by blacklisting it or removing the nct6775 driver until patched.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-74553. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart