CVE-2026-72397

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the pmbus data2reg vid() function within the hwmon (pmbus/core) component. The function hardcoded the VR11 encoding, ignoring the vrm version configured by the driver. This discrepancy occurs because the pmbus reg2data vid() function already correctly handles the version switch. Consequently, drivers selecting a non-VR11 VID mode that expose a regulator or hwmon vout setter may send incorrect codes to the PMBUS VOUT COMMAND endpoint, potentially leading to the chip interpreting voltage requests incorrectly and applying dangerously high voltage levels.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.