vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2024-26730

hwmon: (nct6775) Fix access to temperature configuration registers

HIGH
7
CVSS Score
Published: April 3, 2024 at 05:00 PM UTC
Updated: August 19, 2026 at 05:18 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH7
Exploit prediction
EPSS 0.3%
SSVC
No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: hwmon: (nct6775) Fix access to temperature configuration registers The number of temperature configuration registers does not always match the total number of temperature registers. This can result in access errors reported if KASAN is enabled. BUG: KASAN: global-out-of-bounds in nct6775_probe+0x5654/0x6fe9 nct6775_core

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
95%
6.6 ≤ v < 6.6.196.6 ≤ v < 6.7.76.6 ≤ v < 6.86.7 ≤ v < 6.7.74283b0e29d58c6b11e2e45a5afcab401da4e79946.6.196.8 rc16.8 rc26.8 rc36.8 rc46.8 rc5b7f1f7b2523a6a4382f12fe953380b847b80e09d
Vendor states this is fixed in 745aa03c513f1ba12cb98495467676f7acf3fffd (fixed)
Vendor states this is fixed in c196387820c9214c5ceaff56d77303c82514b8b1 (fixed)
Vendor states this is fixed in d56e460e19ea8382f813eb489730248ec8d7eb73 (fixed)
Vendor states this is fixed in f006c45a3ea424f8f6c8e4b9283bc245ce2a4d0f (fixed)
Vendor states this is fixed in 6.6 (unaffected)
Vendor states this is fixed in 6.6.19 (unaffected)
Vendor states this is fixed in 6.7.7 (unaffected)
Vendor states this is fixed in 6.8 (unaffected)

References (4)

Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/c196387820c9214c5ceaff56d77303c82514b8b1
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/d56e460e19ea8382f813eb489730248ec8d7eb73
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/f006c45a3ea424f8f6c8e4b9283bc245ce2a4d0f
Source: cverecord
https://git.kernel.org/stable/c/745aa03c513f1ba12cb98495467676f7acf3fffd

SSVC — Action Prioritization

SSVCNo known exploitNot automatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

7HIGH[email protected]
Attack Vector
LOCAL
Complexity
HIGH
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-787

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card