In the Linux kernel, the following vulnerability has been resolved:
hwmon: (ltc2991) re-order conditions to fix off by one bug
LTC2991_T_INT_CH_NR is 4. The st->temp_en[] array has LTC2991_MAX_CHANNEL (4) elements. Thus if "channel" is equal to LTC2991_T_INT_CH_NR then we have read one element beyond the end of the array. Flip the conditions around so that we check if "channel" is valid before using it as an array index.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Ubuntu | — | Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-awsUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-nvidia-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1018-oemUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-oem-22.04bUpgrade linux-image-gkeopUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-virtualUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-24.04aUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64kUpgrade linux-image-gcpUpgrade linux-image-genericUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-oem-24.04 | Dec 13, 2024 | Aug 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub