CVE-2026-46007 Details
Description
In the Linux kernel, the following vulnerability has been resolved: hwmon: (powerz) Avoid cacheline sharing for DMA buffer Depending on the architecture the transfer buffer may share a cacheline with the following mutex. As the buffer may be used for DMA, that is problematic. Use the high-level DMA helpers to make sure that cacheline sharing can not happen. Also drop the comment, as the helpers are documentation enough. https://sashiko.dev/#/message/20260408175814.934BFC19421%40smtp.kernel.org
A vulnerability has been addressed in the Linux kernel's powerz driver within the hardware monitoring (hwmon) subsystem. This issue involves improper management of a transfer buffer used for Direct Memory Access (DMA) operations, which could inadvertently share a cacheline with a mutex, leading to potential synchronization problems. The vulnerability affects several versions of the Linux kernel.
Users can upgrade to the latest version of the Linux kernel where this vulnerability has been addressed. The specific commit that resolves this issue is 3023c050af3600bf451153335dea5e073c9a3088.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/1869da3efe703b016b23d4885f3fe6c1751959c6 | kernel.org | Patch |
| https://git.kernel.org/stable/c/270e5c576a6e30f6b337fa91d35b44c241297533 | kernel.org | Patch |
| https://git.kernel.org/stable/c/2fa2273016a0483217404cfe330967c4ac6832a9 | kernel.org | Patch |
| https://git.kernel.org/stable/c/3023c050af3600bf451153335dea5e073c9a3088 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.7, < 6.12.88 >= 6.13, < 6.18.30 >= 6.19, < 7.0.4 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Jun 16, 2026 | Initial Analysis | [email protected] |
| May 27, 2026 | New CVE Received | kernel.org |