Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

CVE-2026-74552

Published Aug 15, 2026 EPSS 0.17% (7th pctl)

Overview

CVE-2026-74552 is a known-severity vulnerability. It was published on August 15, 2026.

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

hwmon: (lm90) Only report alarms if driver is ready

Userspace can read sysfs attributes before driver registration is complete,

immediately after devm_hwmon_device_register_with_info() has been called.

At that time, data->hwmon_dev is not yet initialized. This can trigger

a NULL pointer access since lm90_update_device() and with it

lm90_update_alarms_locked() will be called. This call schedules

report_work and lm90_report_alarms(), which passes the still-NULL

data->hwmon_dev to hwmon_notify_event() and triggers a NULL pointer

dereference.

Fix the problem by only scheduling the report and alert workers

data->hwmon_dev is set.

Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

References

Ref git.kernel.org/stable/c/075fce376cf852db9293481edce07c181a9b1f46 Ref git.kernel.org/stable/c/31ce62d36d859423dc39f9902f7c4c307b2e00e3 Ref git.kernel.org/stable/c/4eed33c7db5c0c573928d28d8a2c003642c679b8 Ref git.kernel.org/stable/c/70d9a71aa407044d70b50d356b6decf6659c4d56 Ref git.kernel.org/stable/c/aa9429edf9fc0e90d6f4da19ea4b5495a54ab117 Ref git.kernel.org/stable/c/f0b791a006512a48b6348494cb6960598fa99a58

Frequently Asked Questions

What is CVE-2026-74552?

CVE-2026-74552 is a known-severity vulnerability. It was published on August 15, 2026.

How severe is CVE-2026-74552?

CVSS score information is not yet available for this vulnerability. Check back as the CVE record is updated by NVD analysts.

How do I fix or remediate CVE-2026-74552?

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

How can CyberStrike help with CVE-2026-74552?

CyberStrike's AI-powered security agents can automatically detect CVE-2026-74552 across your infrastructure using autonomous pentesting, DAST scanning, and HackBrowser. The platform continuously monitors for known vulnerabilities and provides actionable remediation guidance prioritized by real-world exploitability.

How CyberStrike Helps

Autonomous Discovery

AI agents map your attack surface to find vulnerabilities like this one.
Continuous Pentesting

Automated penetration testing that runs continuously, not just quarterly.
Code Review

AI-driven PR review catches vulnerable dependencies before they ship.
HackBrowser

Browser-based exploitation validates findings with real proof-of-concept.
Browse by year 2026 2025 2024 2023 2022 2021 2020 2019 2018 2017 2016 2015 2014 2013 2012 2011 2010 2009 2008 2007 2006 2005 2004 2003 2002 2001 2000 1999