CVE-2026-80696

The Linux kernel's ltc4282 hardware-monitoring driver, which supports the Linear Technology/Analog Devices LTC4282 hot-swap controller chip, contains an out-of-bounds memory access when reading the minimum alarm voltage for the VGPIO channel, caused by a missing return statement in that code path. The flaw is triggered locally when a low-privileged process reads the minimum alarm voltage attribute for the VGPIO channel through the hardware monitoring interface, causing the driver to perform an out-of-bounds access (flagged by Coverity static analysis). Per the assigned CVSS 3.1 vector (AV:L/AC:L/PR:L/UI:N, 7.8 high), a local attacker with low privileges could gain high confidentiality, integrity, and availability impact. Only Linux systems running a kernel with the ltc4282 driver enabled on hardware that incorporates the LTC4282 hot-swap controller are affected. There is no known public proof-of-concept, the flaw is not in CISA KEV, and EPSS puts exploitation probability at roughly 0.1% over the next 30 days, so no exploitation is currently known.

What to do: Apply a Linux kernel update from your distribution or vendor that includes the ltc4282 fix (the patch adds the missing return statement); the source data does not specify which stable release series contain it. As a check, determine whether your systems expose an ltc4282 hwmon device (e.g., under /sys/class/hwmon); if the LTC4282 chip is not present or used, the practical risk is minimal, and blacklisting or disabling the ltc4282 driver module removes the affected code path until patched.