{"id":"CVE-2026-90101","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nbnxt_en: Fix call to hardware monitoring event handler\n\nThe first parameter of hwmon_notify_event() is supposed to be the hardware\nmonitoring device","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nbnxt_en: Fix call to hardware monitoring event handler\n\nThe first parameter of hwmon_notify_event() is supposed to be the hardware\nmonitoring device. The bnxt driver ca…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= a19b4801457b0806c0153dc344f548c6f8615896 < e3cad8389a72b8a309b5689c1683310126b0d7da","Linux >= a19b4801457b0806c0153dc344f548c6f8615896 < 001ff5d8e68aacd91768b824b930dd7e68db6688","Linux >= a19b4801457b0806c0153dc344f548c6f8615896 < b17907ef665bc76a495a8f909f74656d3f32b7a2","Linux >= a19b4801457b0806c0153dc344f548c6f8615896 < 622d698df4239fef3e0eb51fe59f4198f957f28a","Linux 6.7"],"published":"2026-09-17","updated":"2026-09-17","sourceUpdated":"2026-09-17T17:17:01.793","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-90101","references":[{"url":"https://git.kernel.org/stable/c/001ff5d8e68aacd91768b824b930dd7e68db6688","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/622d698df4239fef3e0eb51fe59f4198f957f28a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/b17907ef665bc76a495a8f909f74656d3f32b7a2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/e3cad8389a72b8a309b5689c1683310126b0d7da","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"tags":["nvd","cve.org"],"ingestedAt":"2026-09-17T16:21:47.889Z","epss":0.002,"epssPercentile":0.10161,"slug":"CVE-2026-90101","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nbnxt_en: Fix call to hardware monitoring event handler\n\nThe first parameter of hwmon_notify_event() is supposed to be the hardware\nmonitoring device. The bnxt driver calls it with the platform device as\nfirst parameter instead. This API break results in undefined behavior and\nmay result in a crash.\n\nPass the hardware monitoring device as parameter instead to fix the\nproblem.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}