CVE-2026-74711

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A type confusion issue exists in the notification logic of the pmbus module. In the pmbus notify() function, the code unconditionally casts every attribute to a struct sensor device attribute. However, the data->group.attrs collection can contain other types, such as struct pmbus samples reg or struct pmbus sensor, which only embed a base struct device attribute.

If the attribute is a struct pmbus samples reg, reading the index field may result in a slab-out-of-bounds read by accessing memory beyond the allocation. If the attribute is a struct pmbus sensor, the index field overlaps with the page, phase, and reg fields, which could lead to incorrect mask matching during an alert on little-endian systems.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.