CVE-2024-46757
Published: September 19, 2024Last modified: June 17, 2025
Description
In the Linux kernel, the following vulnerability has been resolved: hwmon: (nct6775-core) Fix underflows seen when writing limit attributes DIV_ROUND_CLOSEST() after kstrtol() results in an underflow if a large negative number such as -9223372036854775808 is provided by the user. Fix it by reordering clamp_val() and DIV_ROUND_CLOSEST() operations.
Severity score breakdown
| Parameter | Value |
|---|---|
| Base score | 7.8 |
| Attack Vector | LOCAL |
| Attack complexity | LOW |
| Privileges required | LOW |
| User interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality | HIGH |
| Integrity impact | HIGH |
| Availability impact | HIGH |
| Vector | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Status
| Product | Release | Package | Status |
|---|---|---|---|
| Alpaquita Linux | 23 LTS | linux-lts | Fixed (6.1.110-r0) |
| Stream | linux-lts | Fixed (6.1.110-r0) |
References
- https://git.kernel.org/stable/c/02bb3b4c7d5695ff4be01e0f55676bba49df435e
- https://git.kernel.org/stable/c/0403e10bf0824bf0ec2bb135d4cf1c0cc3bf4bf0
- https://git.kernel.org/stable/c/0c23e18cef20b989a9fd7cb0a745e1259b969159
- https://git.kernel.org/stable/c/298a55f11edd811f2189b74eb8f53dee34d4f14c
- https://git.kernel.org/stable/c/2f695544084a559f181cafdfd3f864c5ff9dd1db
- https://git.kernel.org/stable/c/8a1e958e26640ce015abdbb75c8896301b9bf398
- https://git.kernel.org/stable/c/996221b030995cc5f5baa4a642201d64b62a17cd
- https://git.kernel.org/stable/c/d6035c55fa9afefc23f85f57eff1d4a1d82c5b10