Not yet scoredPublished Aug 15, 2026

CVE-2026-74546hwmon: (adt7470) Fix divide-by-zero TOCTOU crash in fan speed read

Updated under an hour ago (Oct 27, 2026, 9:10 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: hwmon: (adt7470) Fix divide-by-zero TOCTOU crash in fan speed read If the fan data becomes 0 between the FAN_DATA_VALID() check and the FAN_PERIOD_TO_RPM() conversion, it will result in a divide-by-zero crash due to a race with a concurrent update of the cached fan value. Fix a TOCTOU issue by reading fan data once.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Received
Record last updated: Aug 19, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from fc958a61ff6d34a0ec42744d3ff524ee202b2e9f before 689a2ea75434131d0af58aeb7d51fde40e858b4d; from fc958a61ff6d34a0ec42744d3ff524ee202b2e9f before 009240d057e26831cc925feaba4c490209c1d0ba; from fc958a61ff6d34a0ec42744d3ff524ee202b2e9f before d328175045176f85c15c369bd21dc551351e7935; from fc958a61ff6d34a0ec42744d3ff524ee202b2e9f before 832069bec79cf6f903441c5769d3cdba95d0af33; from fc958a61ff6d34a0ec42744d3ff524ee202b2e9f before 96ad57d31763559d376416cdf3bf5ae79bbbebec; from fc958a61ff6d34a0ec42744d3ff524ee202b2e9f before 76963b04b2d1c648d69949d8dd521e1ff7f40b51; from fc958a61ff6d34a0ec42744d3ff524ee202b2e9f before 1b46fe9dc8f8de59310f37e6c5e5c0e05ded46c3	CNA record

References

References

https://git.kernel.org/stable/c/689a2ea75434131d0af58aeb7d51fde40e858b4d
https://git.kernel.org/stable/c/009240d057e26831cc925feaba4c490209c1d0ba
https://git.kernel.org/stable/c/d328175045176f85c15c369bd21dc551351e7935
https://git.kernel.org/stable/c/832069bec79cf6f903441c5769d3cdba95d0af33
https://git.kernel.org/stable/c/96ad57d31763559d376416cdf3bf5ae79bbbebec
https://git.kernel.org/stable/c/76963b04b2d1c648d69949d8dd521e1ff7f40b51
https://git.kernel.org/stable/c/1b46fe9dc8f8de59310f37e6c5e5c0e05ded46c3

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.