CVE-2021-47098

hwmon: (lm90) Prevent integer overflow/underflow in hysteresis calculations

published March 4, 2024

CVSS
—
EPSS
0%
Percentile
12.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

hwmon: (lm90) Prevent integer overflow/underflow in hysteresis calculations

Commit b50aa49638c7 ("hwmon: (lm90) Prevent integer underflows of

temperature calculations") addressed a number of underflow situations

when writing temperature limits. However, it missed one situation, seen

when an attempt is made to set the hysteresis value to MAX_LONG and the

critical temperature limit is negative.

Use clamp_val() when setting the hysteresis temperature to ensure that

the provided value can never overflow or underflow.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00221 · 12.0th percentile
Published
2024-03-04T18:10Z
EPSS history
Timeline
  • 04 MAR 18:10Z
    hwmon: (lm90) Prevent integer overflow/underflow in hysteresis calculations
    cvelistv5