Fix Underflows in hwmon with kstrtol

CVE-2024-46756

What is CVE-2024-46756?

A vulnerability in the Linux kernel's hwmon subsystem specifically impacts the W83627EHF hardware monitoring driver. The issue arises during operations that write limit attributes, which can lead to underflows when a large negative number is input by the user. This scenario typically occurs when invalid data is manipulated via the DIV_ROUND_CLOSEST function following the kstrtol input conversion. This flaw has been addressed by reordering the operations within the clamp_val() and DIV_ROUND_CLOSEST() functions to prevent such underflows, enhancing the overall security of the kernel during hardware monitoring operations.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References