In the Linux kernel, the following vulnerability has been resolved:
hwmon: (lm90) Prevent integer overflow/underflow in hysteresis calculations
Commit b50aa49638c7 ("hwmon: (lm90) Prevent integer underflows of temperature calculations") addressed a number of underflow situations when writing temperature limits. However, it missed one situation, seen when an attempt is made to set the hysteresis value to MAX_LONG and the critical temperature limit is negative.
Use clamp_val() when setting the hysteresis temperature to ensure that the provided value can never overflow or underflow.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 4, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Dec 5, 2024 | Mar 4, 2024 |
| Suse | — | Upgrade ocfs2-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-azureUpgrade kernel-rt_debug-develUpgrade dtb-nvidiaUpgrade dtb-broadcomUpgrade kernel-azure-extraUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade dlm-kmp-64kbUpgrade dtb-socionextUpgrade dtb-freescaleUpgrade dtb-appleUpgrade reiserfs-kmp-64kbUpgrade kernel-default-livepatchUpgrade dtb-amazonUpgrade dlm-kmp-rtUpgrade kernel-obs-buildUpgrade kernel-azure-livepatch-develUpgrade kernel-default-baseUpgrade kernel-rt-livepatch-develUpgrade kernel-64kbUpgrade kernel-azure-develUpgrade kernel-azure-optionalUpgrade kernel-debug-vdsoUpgrade dtb-exynosUpgrade kernel-docs-htmlUpgrade kernel-source-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-source-azureUpgrade kernel-default-vdsoUpgrade kselftests-kmp-azureUpgrade dtb-lgUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-develUpgrade reiserfs-kmp-rtUpgrade kernel-64kb-extraUpgrade kernel-sourceUpgrade kernel-rt-extraUpgrade gfs2-kmp-azureUpgrade kernel-rt_debugUpgrade ocfs2-kmp-defaultUpgrade dtb-alteraUpgrade kernel-rtUpgrade kselftests-kmp-64kbUpgrade kernel-azure-vdsoUpgrade dtb-marvellUpgrade kernel-rt-optionalUpgrade dtb-caviumUpgrade dtb-allwinnerUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade dtb-sprdUpgrade kernel-debugUpgrade kernel-syms-azureUpgrade kernel-default-optionalUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-rt-develUpgrade kernel-defaultUpgrade gfs2-kmp-rtUpgrade kernel-default-extraUpgrade dtb-hisiliconUpgrade kernel-kvmsmallUpgrade dtb-amlogicUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-optionalUpgrade kernel-default-livepatch-develUpgrade dtb-renesasUpgrade kernel-docsUpgrade kernel-develUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-develUpgrade gfs2-kmp-64kbUpgrade kernel-macrosUpgrade reiserfs-kmp-azureUpgrade dtb-mediatekUpgrade kernel-devel-rtUpgrade kernel-default-base-rebuildUpgrade kernel-debug-develUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-symsUpgrade dlm-kmp-azureUpgrade dtb-rockchipUpgrade dtb-armUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-rtUpgrade kernel-obs-qaUpgrade dtb-xilinxUpgrade kernel-64kb-livepatch-develUpgrade dtb-qcomUpgrade dlm-kmp-defaultUpgrade kernel-rt-livepatchUpgrade dtb-amdUpgrade kernel-zfcpdumpUpgrade dtb-apmUpgrade kselftests-kmp-rtUpgrade kernel-devel-azureUpgrade kselftests-kmp-default | Aug 9, 2024 | Mar 4, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub