CVE-2026-90101 (GCVE-0-2026-90101)
Vulnerability from cvelistv5
Published
2026-09-17 16:06
Modified
2026-10-19 08:57
Severity ?
Summary
In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix call to hardware monitoring event handler The first parameter of hwmon_notify_event() is supposed to be the hardware monitoring device. The bnxt driver calls it with the platform device as first parameter instead. This API break results in undefined behavior and may result in a crash. Pass the hardware monitoring device as parameter instead to fix the problem.
References
Impacted products
Vendor Product Version
Linux Linux Version: a19b4801457b0806c0153dc344f548c6f8615896
Version: a19b4801457b0806c0153dc344f548c6f8615896
Version: a19b4801457b0806c0153dc344f548c6f8615896
Version: a19b4801457b0806c0153dc344f548c6f8615896
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/ethernet/broadcom/bnxt/bnxt_hwmon.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "e3cad8389a72b8a309b5689c1683310126b0d7da",
              "status": "affected",
              "version": "a19b4801457b0806c0153dc344f548c6f8615896",
              "versionType": "git"
            },
            {
              "lessThan": "001ff5d8e68aacd91768b824b930dd7e68db6688",
              "status": "affected",
              "version": "a19b4801457b0806c0153dc344f548c6f8615896",
              "versionType": "git"
            },
            {
              "lessThan": "b17907ef665bc76a495a8f909f74656d3f32b7a2",
              "status": "affected",
              "version": "a19b4801457b0806c0153dc344f548c6f8615896",
              "versionType": "git"
            },
            {
              "lessThan": "622d698df4239fef3e0eb51fe59f4198f957f28a",
              "status": "affected",
              "version": "a19b4801457b0806c0153dc344f548c6f8615896",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/ethernet/broadcom/bnxt/bnxt_hwmon.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.7"
            },
            {
              "lessThan": "6.7",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.110",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.52",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.2.*",
              "status": "unaffected",
              "version": "7.2.6",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.3",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.110",
                  "versionStartIncluding": "6.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.52",
                  "versionStartIncluding": "6.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.2.6",
                  "versionStartIncluding": "6.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.3",
                  "versionStartIncluding": "6.7",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbnxt_en: Fix call to hardware monitoring event handler\n\nThe first parameter of hwmon_notify_event() is supposed to be the hardware\nmonitoring device. The bnxt driver calls it with the platform device as\nfirst parameter instead. This API break results in undefined behavior and\nmay result in a crash.\n\nPass the hardware monitoring device as parameter instead to fix the\nproblem."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-19T08:57:59.246Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/e3cad8389a72b8a309b5689c1683310126b0d7da"
        },
        {
          "url": "https://git.kernel.org/stable/c/001ff5d8e68aacd91768b824b930dd7e68db6688"
        },
        {
          "url": "https://git.kernel.org/stable/c/b17907ef665bc76a495a8f909f74656d3f32b7a2"
        },
        {
          "url": "https://git.kernel.org/stable/c/622d698df4239fef3e0eb51fe59f4198f957f28a"
        }
      ],
      "title": "bnxt_en: Fix call to hardware monitoring event handler",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-90101",
    "datePublished": "2026-09-17T16:06:12.213Z",
    "dateReserved": "2026-09-11T19:38:34.786Z",
    "dateUpdated": "2026-10-19T08:57:59.246Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.