CVE-2026-98199

CVE-2026-98199

published October 6, 2026

CVSS
—
EPSS
0%
Percentile
6.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

hwmon: (pmbus/core) increase number of phases and add new mask

Increase the number of phases to 16 as a new upcoming device supports

such a number.

While at it, add a new mask for controlling the source of the output

voltage.

Note (groeck):

This patch was meant to prepare for support of MAX20826 and compatible

devices, which support more than 10 phases per page. However, Sashiko

reports that the mp2975 driver already supports up to 14 phases, and the

mp2856 driver supports up to 12 phases. This already has the potential for

out-of-bounds writes when probing the affected chips, making this patch a

bug fix.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00172 · 6.3th percentile
Published
2026-10-06T13:18Z
References (7)
EPSS history
Timeline
  • 07 OCT 03:43Z
    EPSS moved — → 0%
    epss
  • 06 OCT 08:44Z
    hwmon: (pmbus/core) increase number of phases and add new mask
    cvelistv5