CVE-2026-72396

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

hwmon: adm1275: Prevent reading uninitialized stack

While adding support for the ROHM BD127X0 hot-swap controllers, sashiko

reported an error in device-name comparison, which can lead to reading

uninitialized stack memory.

Quoting Sashiko:

This is a pre-existing issue, but I noticed that just before this block in

adm1275_probe(), there might be an out-of-bounds stack read:

ret = i2c_smbus_read_block_data(client, PMBUS_MFR_MODEL, block_buffer);

if (ret < 0) { ... }

for (mid = adm1275_id; mid->name[0]; mid++) {

if (!strncasecmp(mid->name, block_buffer, strlen(mid->name)))

break;

}

Since i2c_smbus_read_block_data() reads up to 32 bytes into the

uninitialized stack array block_buffer without appending a null

terminator, strncasecmp() could read past the valid bytes returned in ret.

For example, if the device returns a shorter string like "adm12", checking

it against "a

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References