Linux hwe edge: In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus) Fix type confusion in notification logic Sashiko reports: At the… (CVE-2026-74711)

The vulnerability in the Linux kernel's hwmon pmbus subsystem was due to unconditional casting of various attribute types to struct sensor_device_attribute in the pmbus_notify() function. This caused out-of-bounds reads when attributes like struct pmbus_samples_reg or struct pmbus_sensor were cast incorrectly, as these types embed a base device_attribute but differ in layout. The improper casting could lead to memory access beyond allocated bounds or misinterpretation of overlapping fields, potentially triggering spurious notifications. The fix involved using struct sensor_device_attr within struct pmbus_sensor and struct pmbus_label, setting attr->index to -1 for attributes that do not trigger notifications, thereby distinguishing them from boolean attributes that do.

This vulnerability could lead to slab-out-of-bounds reads and potentially cause incorrect notification behavior within the hwmon pmbus subsystem. The CVSS score of 8.4 indicates high impact on confidentiality, integrity, and availability. However, there are no known exploits in the wild. The issue affects local attack vectors with low complexity and no privileges required.

A fix has been implemented in the Linux kernel to correct the type confusion by modifying attribute structures and notification logic. Users should apply the official kernel updates that include this fix. Since this is a kernel-level vulnerability, updating to the patched kernel version is the recommended remediation. Patch status is not explicitly confirmed in the provided data; users should consult the vendor or distribution advisories for the exact fixed versions and update accordingly.