CVE-2026-74547

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw in the adt7470 driver allows a denial of service on the I2C bus and high CPU usage. This occurs when the auto update interval is set to 0 via sysfs and the num temp sensors variable is also set to 0. Under these conditions, the background kthread executes schedule timeout interruptible(0) and the msleep interruptible() delay within the adt7470 read temperatures() function both become 0, resulting in an unbounded busy-loop that floods the I2C bus with continuous transactions.

Recommendations Update the Linux kernel to a version where the lower limit of the clamp val in auto update interval store() is increased to 500 milliseconds. As a temporary mitigation, avoid setting the auto update interval and num temp sensors variables to 0 simultaneously.