VulnerabilityPublished 17 Sep 2026Updated 30 Oct 2026

CVE-2026-90311: Linux kernel · thermal: hwmon: Remove hwmon class device along with its parent

Source GCVE Database

Compare

Authoritative record:CVE-2026-90311· Low

Not known to be exploited · fixed in e67dad2cff9e4fedce69e752d515ef651d745a90 : update Linux kernel when convenient.

Data as of 30 Oct 2026, 18:32 UTC

Severity

Low

Rated Low by Threat Radar's AI analysis · CVSS not yet scored by NVD

Thin evidence

One scorer or none

Patch: Available – fixed in e67dad2cff9e4fedce69e752d515ef651d745a90, df002834cfd880b800fa607135e4bb2e403ce187, 23094544b8e8c43909fd61ca8866ecfe38093ae8 +3

Exploitation evidence

Disclosed: evidence found.
CVE published 17 Sep 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponized: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 30 Oct 2026.

Disclosed: The CVE record is public on cve.org. Its publication is t = 0.
Detectable: A public nuclei template can find exposed instances, for defenders and attackers alike.
Weaponized: A Metasploit exploit module or Exploit-DB entry exists (Metasploit scanner modules do not count), or CISA SSVC or the CVSS exploit maturity reports a public proof of concept.
Exploited in the wild: CISA KEV lists it, CISA SSVC rates exploitation active, or a source reports attacks.
Observed by OffSeq Mirage: OffSeq Mirage honeypot sensors recorded attack traffic for this CVE, or found exposed hosts without attack traffic.

Moments are spaced evenly, not to scale; a dashed line marks a gap of six months or more. Deltas count from t = 0. Sources that give only a date (CISA KEV, Exploit-DB, or a time of exactly 00:00Z) read “same day” rather than hours. Metasploit modules carry the flaw’s disclosure date, not their release date, and nuclei templates carry no date, so both appear above but not on the timeline.

ghsa-43gv-wm7g-h6q4

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

Product	Affected	Fixed in
LinuxLinux	Affected ≥ f6b6b52ef7a54160c0a4d2b56a58f84a2e5b33c5, < e67dad2cff9e4fedce69e752d515ef651d745a90	Fixed in e67dad2cff9e4fedce69e752d515ef651d745a90
LinuxLinux	Affected ≥ f6b6b52ef7a54160c0a4d2b56a58f84a2e5b33c5, < df002834cfd880b800fa607135e4bb2e403ce187	Fixed in df002834cfd880b800fa607135e4bb2e403ce187
LinuxLinux	Affected ≥ f6b6b52ef7a54160c0a4d2b56a58f84a2e5b33c5, < 23094544b8e8c43909fd61ca8866ecfe38093ae8	Fixed in 23094544b8e8c43909fd61ca8866ecfe38093ae8
LinuxLinux	Affected ≥ f6b6b52ef7a54160c0a4d2b56a58f84a2e5b33c5, < 9b405b3e7e131ee85dd78b9cc951b41f0828a333	Fixed in 9b405b3e7e131ee85dd78b9cc951b41f0828a333
LinuxLinux	Affected ≥ f6b6b52ef7a54160c0a4d2b56a58f84a2e5b33c5, < 4fa8915f40f744c6db2a3c25b2ae7d2dd64c77b4	Fixed in 4fa8915f40f744c6db2a3c25b2ae7d2dd64c77b4
LinuxLinux	Affected ≥ f6b6b52ef7a54160c0a4d2b56a58f84a2e5b33c5, < 2b57e24d34b2dfc43c81942bb359d6315bf302fb	Fixed in 2b57e24d34b2dfc43c81942bb359d6315bf302fb

AI-suggested

A fix has been implemented in the Linux kernel to remove the entire hwmon class device interface when the thermal zone device holding it is removed, and to synchronize addition and removal operations under a lock. Users should update to the Linux kernel version that includes this fix once available. Until then, no specific workaround is indicated.

Description

A vulnerability in the Linux kernel's thermal subsystem involves improper removal of hwmon class devices associated with thermal zones. The issue arises because a single hwmon device is registered per thermal zone type under the first thermal zone, but sysfs attributes from other thermal zones of the same type are also added under this device. When the thermal zone holding the hwmon device is removed, the presence of attributes belonging to other zones prevents proper removal, causing removal operations to stall. The fix involves removing the entire hwmon class device interface for the thermal zone type when the associated thermal zone device is removed and synchronizing addition and removal operations under a lock.

Impact

This vulnerability can cause the removal of thermal zone devices to stall or fail due to the inability to remove the associated hwmon class device properly. This may affect system stability or thermal management operations when thermal zones are dynamically removed, such as when the ACPI thermal driver is unbound. There is no indication of remote code execution or privilege escalation. No known exploits in the wild have been reported.

References

Community reviews

Loading reviews…