The bug in the adt7470 hardware monitoring driver causes an unbounded busy-loop when userspace writes a zero to the auto_update_interval sysfs attribute. Because msleep_interruptible() receives a zero value, the driver continuously probes the sensor, exhausting CPU time and flooding the I2C bus with excessive transactions. This results in a denial-of-service condition that can lock up the system and interfere with other I2C devices. The weakness is uncontrolled resource consumption that leads to service degradation.

The affected component is the Linux kernel’s adt7470 driver. All kernel releases that include this driver before the patch—regardless of vendor distribution—are vulnerable. The vendor list indicates Linux:Linux, so any host running a Linux kernel with the adt7470 driver is at risk. No specific version range is provided by the CNA data.

Because the faulty behaviour is triggered through a sysfs attribute normally writable only by privileged users, the exploit is primarily a local denial-of-service. No remote attack vector is mentioned. EPSS is not available and the vulnerability is not in the CISA KEV catalog. The CVSS score is not disclosed. Nonetheless, an attacker with local access that can write to the sysfs node can force the device into continuous I2C traffic, which can degrade system responsiveness or prevent other I2C devices from communicating.