In the Linux kernel, the following vulnerability has been resolved: hwmon: (lm95234) Fix underflows seen when writing limit attributes DIV_ROUND_CLOSEST() after kstrtol() results in an underflow if a large negative number such as -9223372036854775808 is provided by the user. Fix it by reordering clamp_val() and DIV_ROUND_CLOSEST() operations.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

No data.

References
Link Providers
https://git.kernel.org/stable/c/0fc27747633aa419f9af40e7bdfa00d2ec94ea81 cve-icon cve-icon
https://git.kernel.org/stable/c/16f42953231be1e7be77bc24005270d9e0d9d2ee cve-icon cve-icon
https://git.kernel.org/stable/c/438453dfbbdcf4be26891492644aa3ecbb42c336 cve-icon cve-icon
https://git.kernel.org/stable/c/46e4fd338d5bdbaf60e41cda625b24949d2af201 cve-icon cve-icon
https://git.kernel.org/stable/c/59c1fb9874a01c9abc49a0a32f192a7e7b4e2650 cve-icon cve-icon
https://git.kernel.org/stable/c/93f0f5721d0cca45dac50af1ae6f9a9826c699fd cve-icon cve-icon
https://git.kernel.org/stable/c/af64e3e1537896337405f880c1e9ac1f8c0c6198 cve-icon cve-icon
https://git.kernel.org/stable/c/da765bebd90e1b92bdbc3c6a27a3f3cc81529ab6 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024091841-CVE-2024-46758-6154@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-46758 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-46758 cve-icon
History

Sun, 29 Sep 2024 15:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Mon, 23 Sep 2024 16:45:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Weaknesses CWE-191
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

 cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

Wed, 18 Sep 2024 14:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Wed, 18 Sep 2024 07:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: hwmon: (lm95234) Fix underflows seen when writing limit attributes DIV_ROUND_CLOSEST() after kstrtol() results in an underflow if a large negative number such as -9223372036854775808 is provided by the user. Fix it by reordering clamp_val() and DIV_ROUND_CLOSEST() operations.
Title hwmon: (lm95234) Fix underflows seen when writing limit attributes
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-09-18T07:12:17.870Z

Updated: 2024-12-19T09:22:33.269Z

Reserved: 2024-09-11T15:12:18.271Z

Link: CVE-2024-46758

cve-icon Vulnrichment

Updated: 2024-09-29T14:45:26.254Z

cve-icon NVD

Status : Analyzed

Published: 2024-09-18T08:15:04.367

Modified: 2024-09-23T16:29:24.767

Link: CVE-2024-46758

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-09-18T00:00:00Z

Links: CVE-2024-46758 - Bugzilla