Skip to main content
CVE-2026-99022VulnerabilityPublished Updated

Microsoft · regulator: ltc3676: don't read the write-only HRST and CLIRQ registers

Affects MicrosoftSource GCVE Database

0
Authoritative record:CVE-2026-99022· Medium

Not known to be exploited · fixed in fd376d83741118e0212f0da985889c1a98d9c827 : update Microsoft when convenient.

Data as of 28 Oct 2026, 08:45 UTC

Severity
Medium

Rated by Threat Radar · CVSS not yet scored by NVD

Patch
Available – fixed in fd376d83741118e0212f0da985889c1a98d9c827, ca5d85335a8fa6e87b45629f1a07b412482cab17, 199a62d70314d21f06a9a6faaa3ef54d0404910c +2

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 23 Oct 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponised: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ 37b918a034feda1b1ef404acf003812f37ab8da2, < fd376d83741118e0212f0da985889c1a98d9c827
Fixed in
  • fd376d83741118e0212f0da985889c1a98d9c827
LinuxLinuxAffected
  • ≥ 37b918a034feda1b1ef404acf003812f37ab8da2, < ca5d85335a8fa6e87b45629f1a07b412482cab17
Fixed in
  • ca5d85335a8fa6e87b45629f1a07b412482cab17
LinuxLinuxAffected
  • ≥ 37b918a034feda1b1ef404acf003812f37ab8da2, < 199a62d70314d21f06a9a6faaa3ef54d0404910c
Fixed in
  • 199a62d70314d21f06a9a6faaa3ef54d0404910c
LinuxLinuxAffected
  • ≥ 37b918a034feda1b1ef404acf003812f37ab8da2, < 28c2388ee24cdbefbcc458fa41ef7bffaaa1cc83
Fixed in
  • 28c2388ee24cdbefbcc458fa41ef7bffaaa1cc83
LinuxLinuxAffected
  • ≥ 37b918a034feda1b1ef404acf003812f37ab8da2, < 1fb0d58fd363b439b4faf08a16ee6ae38b575cd4
Fixed in
  • 1fb0d58fd363b439b4faf08a16ee6ae38b575cd4
LinuxLinuxAffected
  • =4.9
Fixed in–

Description

This vulnerability involves the LTC3676 regulator where reading the write-only HRST and CLIRQ registers is problematic. The advisory does not provide further technical details or impact information. The affected versions are 3.0 and 4.0 of the Microsoft product referenced. No CVSS score or exploit information is available.

References

Community reviews

Loading reviews…