hwmon: (adt7470) Fix busy-loop and I2C flooding in update thread

MITRE NVD CVE.ORG JSON API

Summary

CVECVE-2026-74547
StatePUBLISHED
AssignerLinux
Source PriorityCVE Program / NVD first with legacy fallback
Published2026-08-15 13:18:00 UTC
Updated2026-08-15 13:18:00 UTC
DescriptionIn the Linux kernel, the following vulnerability has been resolved: hwmon: (adt7470) Fix busy-loop and I2C flooding in update thread When userspace configures 'auto_update_interval' to 0 via sysfs, the background kthread executes schedule_timeout_interruptible(0), which returns immediately. If 'num_temp_sensors' is concurrently or previously set to 0, the msleep_interruptible() delay inside adt7470_read_temperatures() also becomes 0. This combination forces the background thread into a tight, unbounded busy-loop, hogging the CPU and flooding the I2C bus with a continuous stream of transactions. Fix this vulnerability by raising the lower limit of the clamp_val in auto_update_interval_store() from 0 to 500 milliseconds. This guarantees a reasonable minimum sleep window between sensor updates, protecting the system from intentional or accidental I2C bus denial of service.

Vendor Declared Affected Products

SourceVendorProductVersionPlatforms
CNA Linux Linux affected 89fac11cb3e7c5860c425dba14845c09ccede39d 1a42bd72a66205e439db1d1142442b62d393408a git Not specified
CNA Linux Linux affected 89fac11cb3e7c5860c425dba14845c09ccede39d 38e6b5ce5794ff09442231cc171c2be5e900bab3 git Not specified
CNA Linux Linux affected 89fac11cb3e7c5860c425dba14845c09ccede39d 82d65f7ef11edcea0228745440b8b4b1f222c34c git Not specified
CNA Linux Linux affected 89fac11cb3e7c5860c425dba14845c09ccede39d 5ea299c3aa42a827f6a863eeead6de3525bbb17a git Not specified
CNA Linux Linux affected 89fac11cb3e7c5860c425dba14845c09ccede39d cb0b7f9c43b0abbd422a7e4c2c85e91db429207c git Not specified
CNA Linux Linux affected 2.6.29 Not specified
CNA Linux Linux unaffected 2.6.29 semver Not specified
CNA Linux Linux unaffected 6.6.151 6.6.* semver Not specified
CNA Linux Linux unaffected 6.12.103 6.12.* semver Not specified
CNA Linux Linux unaffected 6.18.44 6.18.* semver Not specified
CNA Linux Linux unaffected 7.1.8 7.1.* semver Not specified
CNA Linux Linux unaffected 7.2-rc6 * original_commit_for_fix Not specified

References

ReferenceSourceLinkTags
git.kernel.org/stable/c/5ea299c3aa42a827f6a863eeead6de3525bbb17a 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/38e6b5ce5794ff09442231cc171c2be5e900bab3 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/82d65f7ef11edcea0228745440b8b4b1f222c34c 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/cb0b7f9c43b0abbd422a7e4c2c85e91db429207c 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/1a42bd72a66205e439db1d1142442b62d393408a 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
CVE Program record CVE.ORG www.cve.org canonical
NVD vulnerability detail NVD nvd.nist.gov canonical, analysis

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report