CVE-2026-90101

Source
https://cve.org/CVERecord?id=CVE-2026-90101
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-90101.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-90101
Downstream
Published
2026-09-17T16:06:12Z
Modified
2026-09-19T03:47:24Z
Summary
bnxt_en: Fix call to hardware monitoring event handler
Details

In the Linux kernel, the following vulnerability has been resolved:

bnxt_en: Fix call to hardware monitoring event handler

The first parameter of hwmon_notify_event() is supposed to be the hardware monitoring device. The bnxt driver calls it with the platform device as first parameter instead. This API break results in undefined behavior and may result in a crash.

Pass the hardware monitoring device as parameter instead to fix the problem.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/90xxx/CVE-2026-90101.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
a19b4801457b0806c0153dc344f548c6f8615896
Fixed
e3cad8389a72b8a309b5689c1683310126b0d7da
Fixed
001ff5d8e68aacd91768b824b930dd7e68db6688
Fixed
b17907ef665bc76a495a8f909f74656d3f32b7a2
Fixed
622d698df4239fef3e0eb51fe59f4198f957f28a

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-90101.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.110
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.52
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.6

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-90101.json"