In the Linux kernel, the following vulnerability has been resolved:
hwmon: (lm90) Prevent integer overflow/underflow in hysteresis calculations
Commit b50aa49638c7 ("hwmon: (lm90) Prevent integer underflows of temperature calculations") addressed a number of underflow situations when writing temperature limits. However, it missed one situation, seen when an attempt is made to set the hysteresis value to MAX_LONG and the critical temperature limit is negative.
Use clamp_val() when setting the hysteresis temperature to ensure that the provided value can never overflow or underflow.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 4, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Dec 5, 2024 | Mar 4, 2024 |
| Suse | — | Upgrade kernel-64kbUpgrade kernel-default-baseUpgrade kernel-debug-vdsoUpgrade kernel-sourceUpgrade kernel-azure-develUpgrade kernel-rt-livepatch-develUpgrade reiserfs-kmp-rtUpgrade dtb-allwinnerUpgrade dtb-sprdUpgrade kernel-rt-optionalUpgrade dtb-marvellUpgrade gfs2-kmp-azureUpgrade kernel-default-vdsoUpgrade dtb-alteraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rtUpgrade kselftests-kmp-64kbUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade kernel-rt_debugUpgrade dtb-broadcomUpgrade dtb-amazonUpgrade kernel-azureUpgrade dtb-lgUpgrade kernel-azure-extraUpgrade dlm-kmp-rtUpgrade kernel-source-rtUpgrade kernel-docs-htmlUpgrade kernel-64kb-extraUpgrade kernel-source-vanillaUpgrade dtb-freescaleUpgrade kernel-default-livepatchUpgrade dtb-caviumUpgrade cluster-md-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-64kbUpgrade kernel-default-develUpgrade dtb-exynosUpgrade kernel-azure-optionalUpgrade dtb-socionextUpgrade ocfs2-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-rt-extraUpgrade dtb-nvidiaUpgrade kernel-rt_debug-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade dtb-appleUpgrade kernel-rt-vdsoUpgrade kernel-syms-rtUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-develUpgrade kernel-default-base-rebuildUpgrade kernel-macrosUpgrade kernel-docsUpgrade kernel-default-livepatch-develUpgrade dtb-amlogicUpgrade dtb-hisiliconUpgrade dtb-xilinxUpgrade kernel-default-extraUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kernel-obs-qaUpgrade reiserfs-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-develUpgrade kselftests-kmp-defaultUpgrade kernel-debugUpgrade kernel-kvmsmallUpgrade kernel-devel-rtUpgrade dtb-renesasUpgrade dtb-mediatekUpgrade kernel-rt-develUpgrade ocfs2-kmp-azureUpgrade dtb-apmUpgrade kernel-devel-azureUpgrade cluster-md-kmp-azureUpgrade dtb-amdUpgrade kernel-symsUpgrade kernel-64kb-livepatch-develUpgrade kernel-defaultUpgrade dtb-qcomUpgrade kernel-64kb-optionalUpgrade dlm-kmp-defaultUpgrade dtb-armUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-rtUpgrade kernel-debug-develUpgrade kernel-rt-livepatchUpgrade kernel-default-optionalUpgrade kernel-zfcpdumpUpgrade dtb-rockchipUpgrade kernel-debug-livepatch-develUpgrade reiserfs-kmp-azure | Aug 9, 2024 | Mar 4, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub