CVE-2026-80695

A flaw was found in the Linux kernel's hwmon (hardware monitoring) subsystem, specifically in the sht3x driver. This vulnerability occurs due to unaligned memory accesses when the driver processes 16-bit temperature and humidity values. A local attacker or a malicious device interacting with the driver could trigger this flaw. This can lead to a kernel panic on strict-alignment architectures, resulting in a denial of service (DoS).

A moderate severity denial-of-service flaw was found in the Linux kernel hwmon subsystem's sht3x driver. In sht3x_update_client(), the 16-bit temperature and humidity values are extracted from a stack-allocated byte array using be16_to_cpup() with pointers calculated as buf and buf + 3; since these pointers differ by an odd number of bytes, at least one of them is guaranteed to be at an unaligned offset. On strict-alignment architectures such as ARMv5 or SPARC, this triggers an alignment fault that results in a kernel panic. A local attacker able to trigger reads from an sht3x sensor device, or a malicious device interacting with the driver, could use this flaw to crash the system, causing a denial of service. Red Hat rated the impact of this flaw as Moderate (CVSS 3.1 score 5.5, CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). All Red Hat products currently listed in this flaw, covering Red Hat Enterprise Linux and Red Hat In-Vehicle OS kernel and kernel-rt streams, are marked not affected because the vulnerable code is not present in the shipped kernels, so no Red Hat customers are exposed to this issue.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.