{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-74547", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-08-15T05:44:03.915Z", "datePublished": "2026-08-15T12:27:55.777Z", "dateUpdated": "2026-08-19T16:38:37.219Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-19T16:38:37.219Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nhwmon: (adt7470) Fix busy-loop and I2C flooding in update thread\n\nWhen userspace configures 'auto_update_interval' to 0 via sysfs, the\nbackground kthread executes schedule_timeout_interruptible(0), which\nreturns immediately.\n\nIf 'num_temp_sensors' is concurrently or previously set to 0, the\nmsleep_interruptible() delay inside adt7470_read_temperatures() also\nbecomes 0. This combination forces the background thread into a tight,\nunbounded busy-loop, hogging the CPU and flooding the I2C bus with a\ncontinuous stream of transactions.\n\nFix this vulnerability by raising the lower limit of the clamp_val in\nauto_update_interval_store() from 0 to 500 milliseconds. This guarantees\na reasonable minimum sleep window between sensor updates, protecting the\nsystem from intentional or accidental I2C bus denial of service."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/hwmon/adt7470.c"], "versions": [{"version": "89fac11cb3e7c5860c425dba14845c09ccede39d", "lessThan": "2c4c4d7cadd10b50b5489183bbbb9eb95f6f8344", "status": "affected", "versionType": "git"}, {"version": "89fac11cb3e7c5860c425dba14845c09ccede39d", "lessThan": "4dc1518f9cc57c6db99514cafeb02dd7117d5bda", "status": "affected", "versionType": "git"}, {"version": "89fac11cb3e7c5860c425dba14845c09ccede39d", "lessThan": "1325975a2eab265510e6036d8bf0c0068373d332", "status": "affected", "versionType": "git"}, {"version": "89fac11cb3e7c5860c425dba14845c09ccede39d", "lessThan": "1a42bd72a66205e439db1d1142442b62d393408a", "status": "affected", "versionType": "git"}, {"version": "89fac11cb3e7c5860c425dba14845c09ccede39d", "lessThan": "38e6b5ce5794ff09442231cc171c2be5e900bab3", "status": "affected", "versionType": "git"}, {"version": "89fac11cb3e7c5860c425dba14845c09ccede39d", "lessThan": "82d65f7ef11edcea0228745440b8b4b1f222c34c", "status": "affected", "versionType": "git"}, {"version": "89fac11cb3e7c5860c425dba14845c09ccede39d", "lessThan": "5ea299c3aa42a827f6a863eeead6de3525bbb17a", "status": "affected", "versionType": "git"}, {"version": "89fac11cb3e7c5860c425dba14845c09ccede39d", "lessThan": "cb0b7f9c43b0abbd422a7e4c2c85e91db429207c", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/hwmon/adt7470.c"], "versions": [{"version": "2.6.29", "status": "affected"}, {"version": "0", "lessThan": "2.6.29", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.265", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.216", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.183", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.151", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.103", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.44", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1.8", "lessThanOrEqual": "7.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.29", "versionEndExcluding": "5.10.265"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.29", "versionEndExcluding": "5.15.216"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.29", "versionEndExcluding": "6.1.183"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.29", "versionEndExcluding": "6.6.151"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.29", "versionEndExcluding": "6.12.103"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.29", "versionEndExcluding": "6.18.44"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.29", "versionEndExcluding": "7.1.8"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.29", "versionEndExcluding": "7.2"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/2c4c4d7cadd10b50b5489183bbbb9eb95f6f8344"}, {"url": "https://git.kernel.org/stable/c/4dc1518f9cc57c6db99514cafeb02dd7117d5bda"}, {"url": "https://git.kernel.org/stable/c/1325975a2eab265510e6036d8bf0c0068373d332"}, {"url": "https://git.kernel.org/stable/c/1a42bd72a66205e439db1d1142442b62d393408a"}, {"url": "https://git.kernel.org/stable/c/38e6b5ce5794ff09442231cc171c2be5e900bab3"}, {"url": "https://git.kernel.org/stable/c/82d65f7ef11edcea0228745440b8b4b1f222c34c"}, {"url": "https://git.kernel.org/stable/c/5ea299c3aa42a827f6a863eeead6de3525bbb17a"}, {"url": "https://git.kernel.org/stable/c/cb0b7f9c43b0abbd422a7e4c2c85e91db429207c"}], "title": "hwmon: (adt7470) Fix busy-loop and I2C flooding in update thread", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/hwmon/adt7470.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "2c4c4d7cadd10b50b5489183bbbb9eb95f6f8344", "status": "affected", "version": "89fac11cb3e7c5860c425dba14845c09ccede39d", "versionType": "git"}, {"lessThan": "4dc1518f9cc57c6db99514cafeb02dd7117d5bda", "status": "affected", "version": "89fac11cb3e7c5860c425dba14845c09ccede39d", "versionType": "git"}, {"lessThan": "1325975a2eab265510e6036d8bf0c0068373d332", "status": "affected", "version": "89fac11cb3e7c5860c425dba14845c09ccede39d", "versionType": "git"}, {"lessThan": "1a42bd72a66205e439db1d1142442b62d393408a", "status": "affected", "version": "89fac11cb3e7c5860c425dba14845c09ccede39d", "versionType": "git"}, {"lessThan": "38e6b5ce5794ff09442231cc171c2be5e900bab3", "status": "affected", "version": "89fac11cb3e7c5860c425dba14845c09ccede39d", "versionType": "git"}, {"lessThan": "82d65f7ef11edcea0228745440b8b4b1f222c34c", "status": "affected", "version": "89fac11cb3e7c5860c425dba14845c09ccede39d", "versionType": "git"}, {"lessThan": "5ea299c3aa42a827f6a863eeead6de3525bbb17a", "status": "affected", "version": "89fac11cb3e7c5860c425dba14845c09ccede39d", "versionType": "git"}, {"lessThan": "cb0b7f9c43b0abbd422a7e4c2c85e91db429207c", "status": "affected", "version": "89fac11cb3e7c5860c425dba14845c09ccede39d", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/hwmon/adt7470.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "2.6.29"}, {"lessThan": "2.6.29", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "5.10.*", "status": "unaffected", "version": "5.10.265", "versionType": "semver"}, {"lessThanOrEqual": "5.15.*", "status": "unaffected", "version": "5.15.216", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.183", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.151", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.103", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.44", "versionType": "semver"}, {"lessThanOrEqual": "7.1.*", "status": "unaffected", "version": "7.1.8", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nhwmon: (adt7470) Fix busy-loop and I2C flooding in update thread\n\nWhen userspace configures 'auto_update_interval' to 0 via sysfs, the\nbackground kthread executes schedule_timeout_interruptible(0), which\nreturns immediately.\n\nIf 'num_temp_sensors' is concurrently or previously set to 0, the\nmsleep_interruptible() delay inside adt7470_read_temperatures() also\nbecomes 0. This combination forces the background thread into a tight,\nunbounded busy-loop, hogging the CPU and flooding the I2C bus with a\ncontinuous stream of transactions.\n\nFix this vulnerability by raising the lower limit of the clamp_val in\nauto_update_interval_store() from 0 to 500 milliseconds. This guarantees\na reasonable minimum sleep window between sensor updates, protecting the\nsystem from intentional or accidental I2C bus denial of service."}], "id": "CVE-2026-74547", "lastModified": "2026-08-19T17:21:09.567", "metrics": {}, "published": "2026-08-15T13:18:00.057", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/1325975a2eab265510e6036d8bf0c0068373d332"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/1a42bd72a66205e439db1d1142442b62d393408a"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/2c4c4d7cadd10b50b5489183bbbb9eb95f6f8344"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/38e6b5ce5794ff09442231cc171c2be5e900bab3"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/4dc1518f9cc57c6db99514cafeb02dd7117d5bda"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/5ea299c3aa42a827f6a863eeead6de3525bbb17a"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/82d65f7ef11edcea0228745440b8b4b1f222c34c"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/cb0b7f9c43b0abbd422a7e4c2c85e91db429207c"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: hwmon: (adt7470) Fix busy-loop and I2C flooding in update thread", "id": "2517038", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517038"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-1050", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nhwmon: (adt7470) Fix busy-loop and I2C flooding in update thread\nWhen userspace configures 'auto_update_interval' to 0 via sysfs, the\nbackground kthread executes schedule_timeout_interruptible(0), which\nreturns immediately.\nIf 'num_temp_sensors' is concurrently or previously set to 0, the\nmsleep_interruptible() delay inside adt7470_read_temperatures() also\nbecomes 0. This combination forces the background thread into a tight,\nunbounded busy-loop, hogging the CPU and flooding the I2C bus with a\ncontinuous stream of transactions.\nFix this vulnerability by raising the lower limit of the clamp_val in\nauto_update_interval_store() from 0 to 500 milliseconds. This guarantees\na reasonable minimum sleep window between sensor updates, protecting the\nsystem from intentional or accidental I2C bus denial of service.", "A flaw was found in the Linux kernel's hwmon (adt7470) component. A local user can exploit this by configuring the 'auto_update_interval' to zero via sysfs while 'num_temp_sensors' is also set to zero. This combination forces the background thread into an unbounded busy-loop, consuming CPU resources and flooding the I2C bus with continuous transactions. This can lead to a denial of service (DoS) of the I2C bus."], "name": "CVE-2026-74547", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Out of support scope", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-08-15T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-74547\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-74547\nhttps://lore.kernel.org/linux-cve-announce/2026081549-CVE-2026-74547-6a6e@gregkh/T"], "threat_severity": "Low"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[89fac11cb3e7c5860c425dba14845c09ccede39d,1a42bd72a66205e439db1d1142442b62d393408a)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[89fac11cb3e7c5860c425dba14845c09ccede39d,38e6b5ce5794ff09442231cc171c2be5e900bab3)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[89fac11cb3e7c5860c425dba14845c09ccede39d,82d65f7ef11edcea0228745440b8b4b1f222c34c)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[89fac11cb3e7c5860c425dba14845c09ccede39d,5ea299c3aa42a827f6a863eeead6de3525bbb17a)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[89fac11cb3e7c5860c425dba14845c09ccede39d,cb0b7f9c43b0abbd422a7e4c2c85e91db429207c)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "2.6.29"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[0,2.6.29)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.151,6.7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.103,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.44,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.1.8,7.2.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.2-rc6,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-08-15T14:30:10.511316+00:00", "updated": "2026-08-21T19:30:05.192539+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"], "weaknesses": ["CWE-1050", "CWE-400", "CWE-606"]}