CVE-2026-72397
Description
In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/core) honor vrm_version in pmbus_data2reg_vid() pmbus_data2reg_vid() hardcoded the VR11 encoding regardless of the vrm_version configured by the driver, while pmbus_reg2data_vid() already switched on it. Any driver that selects a non-VR11 VID mode and exposes a regulator (or hwmon vout setter) sent dangerously wrong codes to PMBUS_VOUT_COMMAND -- e.g. an nvidia195mv part asked for 200 mV got the VR11 clamp to 500 mV encoded as 0xB2, which the chip interprets as 1080 mV. Mirror pmbus_reg2data_vid() so writes round-trip with reads.
How to fix
- Linux Linuxcd0e037130806d7714c356eccefac6e1b92dbc34, 125a5a4ad03c74ced4c2a55db45ef03505362ff9, 5bd0d47640395f8a8c34446b62d1781b88869dfa, 828cd614e2af053ca5e1d6da767bbd8a1b5cabfb or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 068c227056b9223fea1a759e08db2558d5cbb5ad ≤ v < cd0e037130806d7714c356eccefac6e1b92dbc34, 068c227056b9223fea1a759e08db2558d5cbb5ad ≤ v < 125a5a4ad03c74ced4c2a55db45ef03505362ff9, 068c227056b9223fea1a759e08db2558d5cbb5ad ≤ v < 5bd0d47640395f8a8c34446b62d1781b88869dfa, 068c227056b9223fea1a759e08db2558d5cbb5ad ≤ v < 828cd614e2af053ca5e1d6da767bbd8a1b5cabfb, 4.3 | cd0e037130806d7714c356eccefac6e1b92dbc34, 125a5a4ad03c74ced4c2a55db45ef03505362ff9, 5bd0d47640395f8a8c34446b62d1781b88869dfa, 828cd614e2af053ca5e1d6da767bbd8a1b5cabfb |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.