01 Record

CVE-2026-98199

hwmon: (pmbus/core) increase number of phases and add new mask

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

hwmon: (pmbus/core) increase number of phases and add new mask

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.17% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 6.6% of scored records. A rank, not a probability.
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Received. NVD last modified this record on 2026-10-19.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-10-06 08:44Z23 DAYS AGO

Last updated

2026-10-19 09:15Z10 DAYS AGO

Reserved

2026-09-25

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-787Out-of-bounds WriteBase

Data version

5.2

Document digest

f4da1a93de5f0495b70a840c4a4c80fd524f681c019a81fd752234d8a6398548

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux2c6fcbb211494f1ff6ef384776944b9e04f4c14c to < 272006a52cbd9c8342cead4d3eb9221ebbe8b985, 2c6fcbb211494f1ff6ef384776944b9e04f4c14c to < b32607710a20ad983f9fe4a3051892584c0641a4, 2c6fcbb211494f1ff6ef384776944b9e04f4c14c to < 66368f682a53f3a3842e20eebb571a59809c52c0, 2c6fcbb211494f1ff6ef384776944b9e04f4c14c to < 1ec644c94466834f8cb6b7ba12636fd047bdfdda, 2c6fcbb211494f1ff6ef384776944b9e04f4c14c to < 9558fc1e042ac6b12dd63c37d2c51be4ec86d402, 2c6fcbb211494f1ff6ef384776944b9e04f4c14c to < b49f100a15b8876deccf8c59f41af92b8e25fd74, 2c6fcbb211494f1ff6ef384776944b9e04f4c14c to < 06bd6794b5fd2163880ac3bfe973d4cc61f359f3, 5.10—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/272006a52cbd9c8342cead4d3eb9221ebbe8b985
git.kernel.orghttps://git.kernel.org/stable/c/b32607710a20ad983f9fe4a3051892584c0641a4
git.kernel.orghttps://git.kernel.org/stable/c/66368f682a53f3a3842e20eebb571a59809c52c0
git.kernel.orghttps://git.kernel.org/stable/c/1ec644c94466834f8cb6b7ba12636fd047bdfdda
git.kernel.orghttps://git.kernel.org/stable/c/9558fc1e042ac6b12dd63c37d2c51be4ec86d402
git.kernel.orghttps://git.kernel.org/stable/c/b49f100a15b8876deccf8c59f41af92b8e25fd74
git.kernel.orghttps://git.kernel.org/stable/c/06bd6794b5fd2163880ac3bfe973d4cc61f359f3

07 Fixed in

Debian 12

linux
Fixed in 6.1.190-1
linux-6.12
Fixed in 6.12.113-1~deb12u1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.113-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 7.2.8-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.