CVE-2026-74551

A flaw was found in the Linux kernel's hwmon: (nzxt-smart2) driver. This vulnerability allows for immediate and deterministic memory corruption on systems with non-coherent CPU architectures, such as ARM or MIPS. When operations like setting a fan speed or updating an interval trigger a USB Direct Memory Access (DMA) mapping, the DMA process can corrupt adjacent variables due to cacheline sharing. This issue is resolved by aligning the output buffer to prevent unintended data corruption.

This vulnerability is rated as Moderate severity because exploitation requires local access and the presence of specialized physical hardware, limiting the blast radius to a localized system crash or denial of service rather than privilege escalation. Red Hat Enterprise Linux releases are not affected as the vulnerable hardware monitoring driver is not enabled in supported kernels. Furthermore, the underlying memory corruption only manifests on architectures utilizing non-coherent cache designs when interacting with the controller.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.