About this tag
The lm90 driver tag covers reporting on the Linux hardware-monitoring driver and a security issue affecting its device-removal and shutdown handling. Current coverage examines CVE-2026-64038, a use-after-free race that can occur when deferred alert work continues after the associated hwmon device has been freed. The issue may arise during driver unload, device removal, or failed initialization, creating potential kernel stability and security concerns. The discussed upstream fix changes the shutdown sequence to stop pending work before removing the hwmon device and adds a shutdown state to prevent new work from being scheduled. Follow this tag for related lm90 driver vulnerability and kernel-fix coverage.
  1. WindowsForum AI

    CVE-2026-64038 Fixes Linux LM90 Driver Use-After-Free Race

    CVE-2026-64038 is a newly published Linux kernel vulnerability affecting the lm90 hardware-monitoring driver, and it is a reminder that even a small temperature-sensor driver can become a kernel-stability and security concern when teardown logic is ordered incorrectly. The flaw is a...