U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Vulnerability Change Records for CVE-2026-72396

Change History

New CVE Received from kernel.org 8/15/2026 2:22:13 AM

Action Type Old Value New Value
Added Description

                  
                
              
In the Linux kernel, the following vulnerability has been resolved:

hwmon: adm1275: Prevent reading uninitialized stack

While adding support for the ROHM BD127X0 hot-swap controllers, sashiko
reported an error in device-name comparison, which can lead to reading
uninitialized stack memory.

Quoting Sashiko:

This is a pre-existing issue, but I noticed that just before this block in
adm1275_probe(), there might be an out-of-bounds stack read:

    ret = i2c_smbus_read_block_data(client, PMBUS_MFR_MODEL, block_buffer);
    if (ret < 0) { ... }
    for (mid = adm1275_id; mid->name[0]; mid++) {
            if (!strncasecmp(mid->name, block_buffer, strlen(mid->name)))
                    break;
    }

Since i2c_smbus_read_block_data() reads up to 32 bytes into the
uninitialized stack array block_buffer without appending a null
terminator, strncasecmp() could read past the valid bytes returned in ret.

For example, if the device returns a shorter string like "adm12", checking
it against "adm1275" up to the length of "adm1275" will continue reading
into uninitialized stack bounds.

Prevent reading uninitialized memory by zeroing the stack array.
Added Reference

                  
                
              
https://git.kernel.org/stable/c/36554592e2f5cac16ff8bf73720d38a6d9ef4a20
Added Reference

                  
                
              
https://git.kernel.org/stable/c/39a581bd64a0e91112ec8017a2dd4e70c1336e99
Added Reference

                  
                
              
https://git.kernel.org/stable/c/553f9517813912a5ab661af5504485d96824a61c
Added Reference

                  
                
              
https://git.kernel.org/stable/c/57d583f069fa9d3d0c0831e34b967d1f61edae94
Added Reference

                  
                
              
https://git.kernel.org/stable/c/82e4ab03a6ab9b87667410f5143bc484d7a62bdc
Added Reference

                  
                
              
https://git.kernel.org/stable/c/93b96e723bdcba6172a5814262be875abcc5d269
Added Reference

                  
                
              
https://git.kernel.org/stable/c/aa35cee30686e6be3c890bf741429c5025d55abe
Added Reference

                  
                
              
https://git.kernel.org/stable/c/c9e04a52663bc6651c06c2427df088b751062bd6
Added Affected

                  
                
              
[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["drivers/hwmon/pmbus/adm1275.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"87102808d03948c825c3bdc48316e48f6422fd7e","lessThan":"57d583f069fa9d3d0c0831e34b967d1f61edae94","versionType":"git","status":"affected"},{"version":"87102808d03948c825c3bdc48316e48f6422fd7e","lessThan":"82e4ab03a6ab9b87667410f5143bc484d7a62bdc","versionType":"git","status":"affected"},{"version":"87102808d03948c825c3bdc48316e48f6422fd7e","lessThan":"c9e04a52663bc6651c06c2427df088b751062bd6","versionType":"git","status":"affected"},{"version":"87102808d03948c825c3bdc48316e48f6422fd7e","lessThan":"39a581bd64a0e91112ec8017a2dd4e70c1336e99","versionType":"git","status":"affected"},{"version":"87102808d03948c825c3bdc48316e48f6422fd7e","lessThan":"aa35cee30686e6be3c890bf741429c5025d55abe","versionType":"git","status":"affected"},{"version":"87102808d03948c825c3bdc48316e48f6422fd7e","lessThan":"36554592e2f5cac16ff8bf73720d38a6d9ef4a20","versionType":"git","status":"affected"},{"version":"87102808d03948c825c3bdc48316e48f6422fd7e","lessThan":"93b96e723bdcba6172a5814262be875abcc5d269","versionType":"git","status":"affected"},{"version":"87102808d03948c825c3bdc48316e48f6422fd7e","lessThan":"553f9517813912a5ab661af5504485d96824a61c","versionType":"git","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["drivers/hwmon/pmbus/adm1275.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"3.3","status":"affected"},{"version":"0","lessThan":"3.3","versionType":"semver","status":"unaffected"},{"version":"5.10.261","lessThanOrEqual":"5.10.*","versionType":"semver","status":"unaffected"},{"version":"5.15.212","lessThanOrEqual":"5.15.*","versionType":"semver","status":"unaffected"},{"version":"6.1.178","lessThanOrEqual":"6.1.*","versionType":"semver","status":"unaffected"},{"version":"6.6.145","lessThanOrEqual":"6.6.*","versionType":"semver","status":"unaffected"},{"version":"6.12.97","lessThanOrEqual":"6.12.*","versionType":"semver","status":"unaffected"},{"version":"6.18.40","lessThanOrEqual":"6.18.*","versionType":"semver","status":"unaffected"},{"version":"7.1.5","lessThanOrEqual":"7.1.*","versionType":"semver","status":"unaffected"},{"version":"7.2-rc2","lessThanOrEqual":"*","versionType":"original_commit_for_fix","status":"unaffected"}]}]