Hardware Monitor Vulnerability Fix
CVE-2024-46757

7.8HIGH

Key Information:

Vendor

Linux

Status
Vendor
CVE Published:
18 September 2024

What is CVE-2024-46757?

A vulnerability exists in the Linux kernel specifically within the nct6775-core driver, where an underflow can occur when an excessively large negative number, such as -9223372036854775808, is supplied by the user when writing limit attributes. This situation arises due to the sequence of operations that involve DIV_ROUND_CLOSEST() and kstrtol(). The vulnerability has been identified and resolved by modifying the order of the clamp_val() function and DIV_ROUND_CLOSEST() operations to prevent this underflow condition from occurring, thus enhancing the reliability and security of the kernel.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Affected Version(s)

Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 298a55f11edd811f2189b74eb8f53dee34d4f14c

Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2

Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 8a1e958e26640ce015abdbb75c8896301b9bf398

References

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.