Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
CVE-2026-97582: Linux kernel fan control could cause system crash
CVE-2026-97582 · published 1 month ago
Summary
The Linux kernel's fan monitoring code could try to use data that has already been freed, potentially leading to a crash or unexpected behavior. This happens when a fan alarm is triggered while the system is shutting down the fan driver. Updating the kernel to the latest version from your Linux distribution will apply the fix and prevent the issue.
What to do
- Update linux kernel to version 7.2.7.
- Update bellsoft linux-lts to version 6.12.111-r0.
- Update bellsoft linux-lts to version 6.18.53-r0.
- Update debian linux to version 6.12.111-1.
- Update debian linux to version 7.2.7-1.
- Update bellsoft linux-lts to version 6.1.189-r0.
- Update debian linux-6.12 to version 6.12.111-1~deb12u1.
- Update debian linux to version 6.1.190-1.
- Update canonical linux-aws-5.15 to version 5.15.0-1119.126~20.04.1.
- Update canonical linux-azure-5.15 to version 5.15.0-1125.134~20.04.1.
- Update canonical linux-azure-fde-5.15 to version 5.15.0-1124.133~20.04.1.
- Update canonical linux-gcp-5.15 to version 5.15.0-1120.130~20.04.1.
- Update canonical linux-hwe-5.15 to version 5.15.0-202.212~20.04.1.
- Update canonical linux-ibm-5.15 to version 5.15.0-1113.117~20.04.1.
- Update canonical linux-intel-iotg-5.15 to version 5.15.0-1114.120~20.04.1.
- Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-197.207~20.04.1.
- Update canonical linux-nvidia-tegra-5.15 to version 5.15.0-1070.72~20.04.1.
- Update canonical linux-oracle-5.15 to version 5.15.0-1116.122~20.04.1.
- Update canonical linux-riscv-5.15 to version 5.15.0-1113.117~20.04.2.
- Update canonical linux to version 5.15.0-202.212.
- Update canonical linux-aws to version 5.15.0-1119.126.
- Update canonical linux-azure to version 5.15.0-1125.134.
- Update canonical linux-azure-fde to version 5.15.0-1124.133.
- Update canonical linux-gcp to version 5.15.0-1120.130.
- Update canonical linux-gke to version 5.15.0-1115.121.
- Update canonical linux-gkeop to version 5.15.0-1102.110.
- Update canonical linux-ibm to version 5.15.0-1113.117.
- Update canonical linux-intel-iotg to version 5.15.0-1114.120.
- Update canonical linux-kvm to version 5.15.0-1111.116.
- Update canonical linux-lowlatency to version 5.15.0-197.207.
- Update canonical linux-nvidia to version 5.15.0-1114.115.
- Update canonical linux-nvidia-tegra to version 5.15.0-1070.72.
- Update canonical linux-nvidia-tegra-igx to version 5.15.0-1059.59.
- Update canonical linux-oracle to version 5.15.0-1116.122.
- Update canonical linux-bluefield to version 5.15.0-1103.105.
- Update canonical linux-intel-iot-realtime to version 5.15.0-1111.115.
- Update canonical linux-realtime to version 5.15.0-1118.127.
- Update canonical linux-aws-fips to version 5.15.0-1119.126+fips1.
- Update canonical linux-azure-fips to version 5.15.0-1125.134+fips1.
- Update canonical linux-fips to version 5.15.0-202.212+fips1.
- Update canonical linux-gcp-fips to version 5.15.0-1120.130+fips1.
- Update canonical linux-hwe-7.0 to version 7.0.0-42.42~24.04.1.
- Update canonical linux-riscv-7.0 to version 7.0.0-42.42.1~24.04.1.
- Update canonical linux to version 7.0.0-42.42.
- Update canonical linux-aws to version 7.0.0-1016.17.
- Update canonical linux-gcp to version 7.0.0-1016.18.
- Update canonical linux-ibm to version 7.0.0-1017.17.
- Update canonical linux-oem-7.0 to version 7.0.0-1017.17.
- Update canonical linux-oracle to version 7.0.0-1015.16.
- Update canonical linux-riscv to version 7.0.0-42.42.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | linux | linux |
< 9b12bd724db9db318e3a68be17693583dc29a066 2.6.37 < 594c62eea7c82f526054496e9fa9b895122a8016 < 7f96803f612134f585ab3b39e6d5b2d4b9c0606f |
| Debian:12 | debian | linux |
< 6.1.190-1 Fix: upgrade to 6.1.190-1
|
| Ubuntu:Pro:14.04:LTS | canonical | linux | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-aws | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-lts-xenial | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws-hwe | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-kvm | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-oracle | All versions |
| Ubuntu:Pro:FIPS:16.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-aws-5.4 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-azure-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-azure-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-gcp-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-gcp-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-hwe-5.4 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-ibm-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-oracle-5.4 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-raspi-5.4 | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-aws-5.15 |
< 5.15.0-1119.126~20.04.1 Fix: upgrade to 5.15.0-1119.126~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-azure-5.15 |
< 5.15.0-1125.134~20.04.1 Fix: upgrade to 5.15.0-1125.134~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-azure-fde-5.15 |
< 5.15.0-1124.133~20.04.1 Fix: upgrade to 5.15.0-1124.133~20.04.1
|
| Ubuntu:Pro:20.04:LTS | canonical | linux-bluefield | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-gcp-5.15 |
< 5.15.0-1120.130~20.04.1 Fix: upgrade to 5.15.0-1120.130~20.04.1
|
Showing 50 of 201. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-hwe-5.15 |
< 5.15.0-202.212~20.04.1 Fix: upgrade to 5.15.0-202.212~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-ibm | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-ibm-5.15 |
< 5.15.0-1113.117~20.04.1 Fix: upgrade to 5.15.0-1113.117~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-intel-iotg-5.15 |
< 5.15.0-1114.120~20.04.1 Fix: upgrade to 5.15.0-1114.120~20.04.1
|
| Ubuntu:Pro:20.04:LTS | canonical | linux-iot | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 |
< 5.15.0-197.207~20.04.1 Fix: upgrade to 5.15.0-197.207~20.04.1
|
| Ubuntu:Pro:20.04:LTS | canonical | linux-nvidia-tegra-5.15 |
< 5.15.0-1070.72~20.04.1 Fix: upgrade to 5.15.0-1070.72~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-oracle-5.15 |
< 5.15.0-1116.122~20.04.1 Fix: upgrade to 5.15.0-1116.122~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-raspi | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-riscv-5.15 |
< 5.15.0-1113.117~20.04.2 Fix: upgrade to 5.15.0-1113.117~20.04.2
|
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-xilinx-zynqmp | All versions |
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-ibm-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg |
< 5.15.0-1114.120 Fix: upgrade to 5.15.0-1114.120
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency |
< 5.15.0-197.207 Fix: upgrade to 5.15.0-197.207
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia |
< 5.15.0-1114.115 Fix: upgrade to 5.15.0-1114.115
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra |
< 5.15.0-1070.72 Fix: upgrade to 5.15.0-1070.72
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra-igx |
< 5.15.0-1059.59 Fix: upgrade to 5.15.0-1059.59
|
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime-6.8 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-aws-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-aws-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-aws-7.0 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-7.0 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-7.0 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-7.0 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-7.0 |
< 7.0.0-42.42~24.04.1 Fix: upgrade to 7.0.0-42.42~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-lowlatency-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-7.0 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-lowlatency | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.8 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle-7.0 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-7.0 |
< 7.0.0-42.42.1~24.04.1 Fix: upgrade to 7.0.0-42.42.1~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-xilinx | All versions |
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime-6.14 | All versions |
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime-6.17 | All versions |
| Ubuntu:26.04:LTS | canonical | linux-nvidia-bos | All versions |
| Ubuntu:26.04:LTS | canonical | linux-oem-7.0 |
< 7.0.0-1017.17 Fix: upgrade to 7.0.0-1017.17
|
| Linux | linux | kernel |
>= 6.19.0, < 7.2.7 Fix: upgrade to 7.2.7
|
| Alpaquita:23 | bellsoft | linux-lts |
>= 6.1.182-r0 >= 6.1.182-r0, < 6.1.189-r0 Fix: upgrade to 6.1.189-r0
|
| Alpaquita:25 | bellsoft | linux-lts |
>= 6.12.103-r0, < 6.12.111-r0 Fix: upgrade to 6.12.111-r0
|
| Alpaquita:stream | bellsoft | linux-lts |
>= 6.18.46-r0, < 6.18.53-r0 Fix: upgrade to 6.18.53-r0
|
| Debian:13 | debian | linux |
< 6.12.111-1 Fix: upgrade to 6.12.111-1
|
| Debian:14 | debian | linux |
< 7.2.7-1 Fix: upgrade to 7.2.7-1
|
| Debian:12 | debian | linux-6.12 |
< 6.12.111-1~deb12u1 Fix: upgrade to 6.12.111-1~deb12u1
|
| Ubuntu:24.04:LTS | canonical | linux-vmware | All versions |
| Ubuntu:22.04:LTS | canonical | linux |
< 5.15.0-202.212 Fix: upgrade to 5.15.0-202.212
|
| Ubuntu:22.04:LTS | canonical | linux-aws |
< 5.15.0-1119.126 Fix: upgrade to 5.15.0-1119.126
|
| Ubuntu:22.04:LTS | canonical | linux-azure |
< 5.15.0-1125.134 Fix: upgrade to 5.15.0-1125.134
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde |
< 5.15.0-1124.133 Fix: upgrade to 5.15.0-1124.133
|
| Ubuntu:22.04:LTS | canonical | linux-gcp |
< 5.15.0-1120.130 Fix: upgrade to 5.15.0-1120.130
|
| Ubuntu:22.04:LTS | canonical | linux-gke |
< 5.15.0-1115.121 Fix: upgrade to 5.15.0-1115.121
|
| Ubuntu:22.04:LTS | canonical | linux-gkeop |
< 5.15.0-1102.110 Fix: upgrade to 5.15.0-1102.110
|
| Ubuntu:22.04:LTS | canonical | linux-ibm |
< 5.15.0-1113.117 Fix: upgrade to 5.15.0-1113.117
|
| Ubuntu:22.04:LTS | canonical | linux-kvm |
< 5.15.0-1111.116 Fix: upgrade to 5.15.0-1111.116
|
| Ubuntu:22.04:LTS | canonical | linux-oracle |
< 5.15.0-1116.122 Fix: upgrade to 5.15.0-1116.122
|
| Ubuntu:Nvidia-BlueField:22.04:LTS | canonical | linux-bluefield |
< 5.15.0-1103.105 Fix: upgrade to 5.15.0-1103.105
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-intel-iot-realtime |
< 5.15.0-1111.115 Fix: upgrade to 5.15.0-1111.115
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime |
< 5.15.0-1118.127 Fix: upgrade to 5.15.0-1118.127
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-aws-fips |
< 5.15.0-1119.126+fips1 Fix: upgrade to 5.15.0-1119.126+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-azure-fips |
< 5.15.0-1125.134+fips1 Fix: upgrade to 5.15.0-1125.134+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-fips |
< 5.15.0-202.212+fips1 Fix: upgrade to 5.15.0-202.212+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-gcp-fips |
< 5.15.0-1120.130+fips1 Fix: upgrade to 5.15.0-1120.130+fips1
|
| Ubuntu:26.04:LTS | canonical | linux |
< 7.0.0-42.42 Fix: upgrade to 7.0.0-42.42
|
| Ubuntu:26.04:LTS | canonical | linux-aws |
< 7.0.0-1016.17 Fix: upgrade to 7.0.0-1016.17
|
| Ubuntu:26.04:LTS | canonical | linux-gcp |
< 7.0.0-1016.18 Fix: upgrade to 7.0.0-1016.18
|
| Ubuntu:26.04:LTS | canonical | linux-ibm |
< 7.0.0-1017.17 Fix: upgrade to 7.0.0-1017.17
|
| Ubuntu:26.04:LTS | canonical | linux-oracle |
< 7.0.0-1015.16 Fix: upgrade to 7.0.0-1015.16
|
| Ubuntu:26.04:LTS | canonical | linux-riscv |
< 7.0.0-42.42.1 Fix: upgrade to 7.0.0-42.42.1
|
Original advisory text
hwmon: (gpio-fan) Fix use-after-free in alarm work
In the Linux kernel, the following vulnerability has been resolved:
hwmon: (gpio-fan) Fix use-after-free in alarm work
fan_alarm_irq_handler() queues fan_data->alarm_work, but nothing
cancels it. fan_alarm_notify() dereferences fan_data and its hwmon
device. On unbind, devres frees the interrupt, which only waits for
the handler itself, and then releases the hwmon device and fan_data,
so a pending fan_alarm_notify() can run after those frees.
Replace INIT_WORK() with devm_work_autocancel(), registered before
devm_request_irq(). The devres cleanup then frees the interrupt
first, so no new work can be queued, and cancels the work while
fan_data and the hwmon device are still alive.
This issue was found by an in-house static analysis tool.
hwmon: (gpio-fan) Fix use-after-free in alarm work
fan_alarm_irq_handler() queues fan_data->alarm_work, but nothing
cancels it. fan_alarm_notify() dereferences fan_data and its hwmon
device. On unbind, devres frees the interrupt, which only waits for
the handler itself, and then releases the hwmon device and fan_data,
so a pending fan_alarm_notify() can run after those frees.
Replace INIT_WORK() with devm_work_autocancel(), registered before
devm_request_irq(). The devres cleanup then frees the interrupt
first, so no new work can be queued, and cancels the work while
fan_data and the hwmon device are still alive.
This issue was found by an in-house static analysis tool.
References
- https://docs.bell-sw.com/security/cves/CVE-2026-97582 Vendor Advisory
- https://git.kernel.org/stable/c/30755d3a5782cd704c8921cac8ee66dffe4383ea URL
- https://git.kernel.org/stable/c/594c62eea7c82f526054496e9fa9b895122a8016 URL
- https://security-tracker.debian.org/tracker/CVE-2026-97582 Vendor Advisory
- https://git.kernel.org/stable/c/7f96803f612134f585ab3b39e6d5b2d4b9c0606f URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-97582 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
- https://git.kernel.org/stable/c/e9fc7d53b2eb34c0a607d1659f49b46911aaf16c URL
- https://ubuntu.com/security/CVE-2026-97582 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-97582 Third Party Advisory
- https://ubuntu.com/security/notices/USN-8962-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8961-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8959-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8963-1 Vendor Advisory
- https://git.kernel.org/stable/c/6e67d9bdac810edacef78cbaeedd34445aa8ceb7 URL
- https://git.kernel.org/stable/c/9b12bd724db9db318e3a68be17693583dc29a066 URL
- https://git.kernel.org/stable/c/a2471ed17b0e6ff7bfb6b2ea8e6e5b04c309d293 URL
- https://git.kernel.org/stable/c/c6ab7f855891877a16d2e2ddf0cd0305fd098a85 URL
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97582... Vendor Advisory
Timeline
Published25 Sep 2026
Updated4 Nov 2026
First seen25 Sep 2026
Sources
CVE-2026-97582 · NVD
CVE-2026-97582 · MITRE
DEBIAN-CVE-2026-97582 · OSV
UBUNTU-CVE-2026-97582 · OSV
CVE-2026-97582 · OSV
BELL-CVE-2026-97582 · OSV
Track software like this
Free during beta