Vulnpedia
← Search CVEs

CVE-2026-98197

HIGH 7

Published 2026-10-06 · Last modified 2026-10-19

In the Linux kernel, the following vulnerability has been resolved: hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove When the fan/pwm 4-5 pins are not used as GPIO, w83791d_probe() creates the w83791d_group_fanpwm45 sysfs group on the I2C client device. The probe error path removes this group when a later initialization step fails, but the normal remove path only removes w83791d_group. As a result, the optional fan/pwm 4-5 sysfs files can remain after the driver is unbound. The callbacks associated with these files access the driver data, which is devm allocated and released after driver unbind. Leaving the sysfs files behind can therefore result in accesses to stale driver data. Remove w83791d_group_fanpwm45 during normal teardown as well. This issue was found by manual code inspection.

ELEVATED IMPACT

Severe if exploited (CVSS 7), but no known exploitation and low modeled probability. Patch on a normal cadence.

Exploitation likelihood

0.1%chance of exploitation in 30 days · 2nd percentile

○ In CISA KEV ○ Catalogued PoC

Impact if exploited

7CVSS 3.1 · HIGH

  • ConfidentialityHigh
  • IntegrityHigh
  • AvailabilityHigh

What an attacker needs

  • ⚠Access: Requires local access to the host
  • ⚠Privileges: Requires a low-privilege account
  • ✓User interaction: No user interaction needed
  • ⚠Complexity: Needs a race window or specific setup

✓ lowers the bar for an attacker · ⚠ raises it

Proof of concept

No public PoC is currently catalogued.

Search for new PoCs

Search GitHub now — results may be empty or unverified.

Tracked sources are checked daily for recent CVEs, including PoCs published after the original disclosure. A later release appears after a tracked source lists it and a refresh succeeds.

Data snapshot:

Affected

Vendors Linux

Products Linux

Weakness (CWE)

Not classified.

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

References and research data (JSON)

Vendor product assessments

Showing 32 of 277 vendor product statements; 245 omitted. Read the full vendor advisory.

  • kernel as a component of Red Hat Enterprise Linux 10 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel

    • none available: Affected
    Red Hat · CVE-2026-98197 · Updated 2026-10-08T23:35:07+00:00
  • kernel-64k-debug-modules-extra as a component of Red Hat Enterprise Linux 10 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-64k-debug-modules-extra

    • none available: Affected
    Red Hat · CVE-2026-98197 · Updated 2026-10-08T23:35:07+00:00
  • kernel-debug-core as a component of Red Hat Enterprise Linux 10 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-debug-core

    • none available: Affected
    Red Hat · CVE-2026-98197 · Updated 2026-10-08T23:35:07+00:00
  • kernel-doc as a component of Red Hat Enterprise Linux 10 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-doc

    • none available: Affected
    Red Hat · CVE-2026-98197 · Updated 2026-10-08T23:35:07+00:00
  • kernel-rt-64k-debug as a component of Red Hat Enterprise Linux 10 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-rt-64k-debug

    • none available: Affected
    Red Hat · CVE-2026-98197 · Updated 2026-10-08T23:35:07+00:00
  • kernel-rt-64k-modules-extra as a component of Red Hat Enterprise Linux 10 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-rt-64k-modules-extra

    • none available: Affected
    Red Hat · CVE-2026-98197 · Updated 2026-10-08T23:35:07+00:00
  • kernel-rt-debug-modules-extra as a component of Red Hat Enterprise Linux 10 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-rt-debug-modules-extra

    • none available: Affected
    Red Hat · CVE-2026-98197 · Updated 2026-10-08T23:35:07+00:00
  • kernel-uki-virt as a component of Red Hat Enterprise Linux 10 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-uki-virt

    • none available: Affected
    Red Hat · CVE-2026-98197 · Updated 2026-10-08T23:35:07+00:00
  • kernel.src as a component of Red Hat Enterprise Linux 10 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel?arch=src

    • none available: Affected
    Red Hat · CVE-2026-98197 · Updated 2026-10-08T23:35:07+00:00
  • kernel-debug as a component of Red Hat Enterprise Linux 6 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-debug

    • no fix planned: Out of support scope
    Red Hat · CVE-2026-98197 · Updated 2026-10-08T23:35:07+00:00
  • perf as a component of Red Hat Enterprise Linux 6 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/perf

    • no fix planned: Out of support scope
    Red Hat · CVE-2026-98197 · Updated 2026-10-08T23:35:07+00:00
  • kernel-doc as a component of Red Hat Enterprise Linux 7 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-doc

    • none available: Affected
    Red Hat · CVE-2026-98197 · Updated 2026-10-08T23:35:07+00:00
  • kernel-rt-doc as a component of Red Hat Enterprise Linux 7 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-rt-doc

    • none available: Affected
    Red Hat · CVE-2026-98197 · Updated 2026-10-08T23:35:07+00:00
  • kernel.src as a component of Red Hat Enterprise Linux 7 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel?arch=src

    • none available: Affected
    Red Hat · CVE-2026-98197 · Updated 2026-10-08T23:35:07+00:00
  • kernel-debug as a component of Red Hat Enterprise Linux 8 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-debug

    • none available: Affected
    Red Hat · CVE-2026-98197 · Updated 2026-10-08T23:35:07+00:00
  • kernel-ipaclones-internal as a component of Red Hat Enterprise Linux 8 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-ipaclones-internal

    • none available: Affected
    Red Hat · CVE-2026-98197 · Updated 2026-10-08T23:35:07+00:00
  • kernel-rt-debug-devel as a component of Red Hat Enterprise Linux 8 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-rt-debug-devel

    • none available: Affected
    Red Hat · CVE-2026-98197 · Updated 2026-10-08T23:35:07+00:00
  • kernel-rt-modules-internal as a component of Red Hat Enterprise Linux 8 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-rt-modules-internal

    • none available: Affected
    Red Hat · CVE-2026-98197 · Updated 2026-10-08T23:35:07+00:00
  • kernel-zfcpdump-devel as a component of Red Hat Enterprise Linux 8 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-zfcpdump-devel

    • none available: Affected
    Red Hat · CVE-2026-98197 · Updated 2026-10-08T23:35:07+00:00
  • kernel-64k as a component of Red Hat Enterprise Linux 9 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-64k

    • none available: Affected
    Red Hat · CVE-2026-98197 · Updated 2026-10-08T23:35:07+00:00
  • kernel-64k-debug-modules-internal as a component of Red Hat Enterprise Linux 9 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-64k-debug-modules-internal

    • none available: Affected
    Red Hat · CVE-2026-98197 · Updated 2026-10-08T23:35:07+00:00
  • kernel-abi-stablelists as a component of Red Hat Enterprise Linux 9 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-abi-stablelists

    • none available: Affected
    Red Hat · CVE-2026-98197 · Updated 2026-10-08T23:35:07+00:00
  • kernel-debug-modules-extra as a component of Red Hat Enterprise Linux 9 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-debug-modules-extra

    • none available: Affected
    Red Hat · CVE-2026-98197 · Updated 2026-10-08T23:35:07+00:00
  • kernel-ipaclones-internal as a component of Red Hat Enterprise Linux 9 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-ipaclones-internal

    • none available: Affected
    Red Hat · CVE-2026-98197 · Updated 2026-10-08T23:35:07+00:00
  • kernel-rt-64k-debug as a component of Red Hat Enterprise Linux 9 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-rt-64k-debug

    • none available: Affected
    Red Hat · CVE-2026-98197 · Updated 2026-10-08T23:35:07+00:00
  • kernel-rt-64k-debug-modules-partner as a component of Red Hat Enterprise Linux 9 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-rt-64k-debug-modules-partner

    • none available: Affected
    Red Hat · CVE-2026-98197 · Updated 2026-10-08T23:35:07+00:00
  • kernel-rt-64k-modules-partner as a component of Red Hat Enterprise Linux 9 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-rt-64k-modules-partner

    • none available: Affected
    Red Hat · CVE-2026-98197 · Updated 2026-10-08T23:35:07+00:00
  • kernel-rt-debug-modules-extra as a component of Red Hat Enterprise Linux 9 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-rt-debug-modules-extra

    • none available: Affected
    Red Hat · CVE-2026-98197 · Updated 2026-10-08T23:35:07+00:00
  • kernel-rt-modules-internal as a component of Red Hat Enterprise Linux 9 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-rt-modules-internal

    • none available: Affected
    Red Hat · CVE-2026-98197 · Updated 2026-10-08T23:35:07+00:00
  • kernel-uki-virt-addons as a component of Red Hat Enterprise Linux 9 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-uki-virt-addons

    • none available: Affected
    Red Hat · CVE-2026-98197 · Updated 2026-10-08T23:35:07+00:00
  • kernel-zfcpdump-modules-partner as a component of Red Hat Enterprise Linux 9 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-zfcpdump-modules-partner

    • none available: Affected
    Red Hat · CVE-2026-98197 · Updated 2026-10-08T23:35:07+00:00
  • openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 4 · known affected

    Vendor assessment for this product only.

    pkg:oci/ose-rhel-coreos-9?repository_url=registry.redhat.io/openshift/ose-rhel-coreos-9

    • none available: Affected
    Red Hat · CVE-2026-98197 · Updated 2026-10-08T23:35:07+00:00

All CVSS metrics

  • HIGH 7 v3.1 · CNA Primary
    CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
  • HIGH 7 v3.1 · NVD Secondary
    CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

References

Advisories

Technical & other

Sources: NVD · CVE.org · EPSS