CVE-2026-90311

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the thermal hwmon implementation where the system creates one hwmon device per thermal zone type, registering it under the first thermal zone of that type. This causes problems when the thermal zone holding the hwmon device is removed. For instance, if multiple ACPI thermal zones exist, attributes from subsequent zones are added under the first zone's hwmon device. When the first thermal zone is removed, the thermal remove hwmon sysfs() function may skip the removal of the hwmon device due to remaining attributes from other zones, preventing the removal process from completing. To resolve this, thermal remove hwmon sysfs() now removes the entire hwmon class device interface for the given thermal zone type. Additionally, the thermal add hwmon sysfs() and thermal remove hwmon sysfs() functions are now executed under thermal hwmon list lock to prevent race conditions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.