# hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove

CVE record · `CVE-2026-98197`

- **Identifiers:** `CVE-2026-98197`
- **State:** Confirmed
- **Severity:** CVSS 7.0 High
- **Critical:** No
- **CNA:** Linux
- **Technologies:** [Linux kernel](https://agentprime.io/advisories/technology/linux-kernel.md)
- **Published:** 6 Oct 2026
- **Updated:** 19 Oct 2026
- **Reviewed by a person:** No

Published by the CVE Program (CNA: Linux) at 6 Oct 2026, 08:44 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

## Affected products, as the CNA wrote them

- Vendor: Linux. Product: Linux.
  - affected: `6e1ecd9b8f1358ed4d099f0c54434240dc40debe to before 081e3a78453635fb370b1712809d2af29e60b4c5` (git)
  - affected: `6e1ecd9b8f1358ed4d099f0c54434240dc40debe to before b1d419eb3bc41245c3d3d99dfe1a7b6c45989586` (git)
  - affected: `6e1ecd9b8f1358ed4d099f0c54434240dc40debe to before 2ccf6c512290a288a2d4d7f076430dfb0c6ee476` (git)
  - affected: `6e1ecd9b8f1358ed4d099f0c54434240dc40debe to before f6e2ab72f32d16d71a2549c7ea062dd209f71670` (git)
  - affected: `6e1ecd9b8f1358ed4d099f0c54434240dc40debe to before 2dd37d00f1f1af8e02ffa70ee573c10fd1a76864` (git)
  - affected: `6e1ecd9b8f1358ed4d099f0c54434240dc40debe to before 2c381e6e0f033f2df13bd64905e7232c42f49009` (git)
  - affected: `6e1ecd9b8f1358ed4d099f0c54434240dc40debe to before 583e04e88e75b8d57304015d83c38e82a9531600` (git)
  - affected: `6e1ecd9b8f1358ed4d099f0c54434240dc40debe to before 0ff9c7775e51ac6d47b1bb5c46f06b1434fe58a8` (git)
  - Other versions: unaffected
- Vendor: Linux. Product: Linux.
  - affected: `2.6.28`
  - unaffected: `before 2.6.28` (semver)
  - unaffected: `5.10.271 to 5.10.*, inclusive` (semver)
  - unaffected: `5.15.222 to 5.15.*, inclusive` (semver)
  - unaffected: `6.1.189 to 6.1.*, inclusive` (semver)
  - unaffected: `6.6.158 to 6.6.*, inclusive` (semver)
  - unaffected: `6.12.112 to 6.12.*, inclusive` (semver)
  - unaffected: `6.18.54 to 6.18.*, inclusive` (semver)
  - unaffected: `7.2.8 to 7.2.*, inclusive` (semver)
  - unaffected: `7.3 to *, inclusive` (original_commit_for_fix)
  - Other versions: affected

## Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

## Severity and exploitation

- 7.0 High, CVSS 3.1: `CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H`, from CNA (Linux)

- **CISA KEV:** Not listed.
- **EPSS:** 0.0012, the 1st percentile, on 10 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

## Timeline

This record came from the full history of the CVE Program, published 6 Oct 2026. New records show when each source confirmed them.

## Sources

- [CVE List: CVE-2026-98197](https://www.cve.org/CVERecord?id=CVE-2026-98197)
- [NVD: CVE-2026-98197](https://nvd.nist.gov/vuln/detail/CVE-2026-98197)

### References from the CNA

- <https://git.kernel.org/stable/c/081e3a78453635fb370b1712809d2af29e60b4c5>
- <https://git.kernel.org/stable/c/b1d419eb3bc41245c3d3d99dfe1a7b6c45989586>
- <https://git.kernel.org/stable/c/2ccf6c512290a288a2d4d7f076430dfb0c6ee476>
- <https://git.kernel.org/stable/c/f6e2ab72f32d16d71a2549c7ea062dd209f71670>
- <https://git.kernel.org/stable/c/2dd37d00f1f1af8e02ffa70ee573c10fd1a76864>
- <https://git.kernel.org/stable/c/2c381e6e0f033f2df13bd64905e7232c42f49009>
- <https://git.kernel.org/stable/c/583e04e88e75b8d57304015d83c38e82a9531600>
- <https://git.kernel.org/stable/c/0ff9c7775e51ac6d47b1bb5c46f06b1434fe58a8>

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.

## Check whether this affects you

This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it. Compare the affected versions above with what you run.

- With the agentprime MCP server (<https://api.agentprime.io/mcp>), `get_advisory` returns this record and `search_advisories` finds related ones. Setup: <https://agentprime.io/mcp.md>
- As JSON: <https://api.agentprime.io/v1/advisories/CVE-2026-98197>
- Everything that needs attention now: <https://agentprime.io/advisories/critical.md>

---

The web page: <https://agentprime.io/advisories/CVE-2026-98197/>. Everything for agents: <https://agentprime.io/llms.txt>.