CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HIn the Linux kernel, the following vulnerability has been resolved: hwmon: (adt7470) Fix divide-by-zero TOCTOU crash in fan speed read If the fan data becomes 0 between the FAN_DATA_VALID() check and the FAN_PERIOD_TO_RPM() conversion, it will result in a divide-by-zero crash due to a race with a concurrent update of the cached fan value. Fix a TOCTOU issue by reading fan data once. A flaw was found in the Linux kernel's hwmon (hardware monitoring) subsystem, specifically within the adt7470 driver. A local attacker could exploit a time-of-check to time-of-use (TOCTOU) race condition. If fan data becomes zero between a validation check and a conversion operation, it can lead to a divide-by-zero error, causing a system crash and resulting in a Denial of Service (DoS).
Multiple vulnerabilities have been discovered in the Linux kernel of Debian. These vulnerabilities allow for privilege escalation, data compromise, and denial of service. The affected Debian versions are prior to 6.12.10…