CVE-2026-64038

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists in the lm90 hardware monitoring driver. The issue occurs because cleanup actions are executed in reverse order during module unbind or probe failure. If the lm90 alert work() or lm90 report alarms() functions execute after the hwmon device has been freed but before the delayed works are cancelled, the lm90 update alarms() function will dereference the freed hwmon dev pointer, leading to a potential system crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.