CVE-2026-74547

A flaw was found in the Linux kernel's hwmon (adt7470) component. A local user can exploit this by configuring the 'auto_update_interval' to zero via sysfs while 'num_temp_sensors' is also set to zero. This combination forces the background thread into an unbounded busy-loop, consuming CPU resources and flooding the I2C bus with continuous transactions. This can lead to a denial of service (DoS) of the I2C bus.

This vulnerability is rated as having Low severity for Red Hat Enterprise Linux because exploitation requires physical hardware containing the specific ADT7470 sensor chip as well as write access to hardware monitoring sysfs controls. In typical deployments, standard enterprise environments rarely utilize this dedicated sensor controller, and modifying device attributes under /sys requires elevated privileges. Consequently, the denial of service resulting from excessive CPU consumption and bus contention does not pose a threat to standard installations.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.