CVE-2024-46756

kernel: hwmon: (w83627ehf) Fix underflows seen when writing limit attributes

Published Sep 18, 2024 CVSS 3.1 · 4.4 Medium EPSS n/a KEV · Not listed

Description

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

No data.

Package	CPE	Advisory	Released Date
Red Hat Enterprise Linux 9
kernel-0:5.14.0-570.12.1.el9_6	cpe:/a:redhat:enterprise_linux:9	RHSA-2025:6966	2025-05-13T00:00:00Z
kernel-0:5.14.0-570.12.1.el9_6	cpe:/o:redhat:enterprise_linux:9	RHSA-2025:6966	2025-05-13T00:00:00Z

No data available yet.

No solution or workaround provided in the CVE record

Source	ID	Title
Debian DLA	DLA-3912-1	linux security update
Debian DLA	DLA-4008-1	linux-6.1 security update
Debian DSA	DSA-5782-1	linux security update
Ubuntu USN	USN-7088-1	Linux kernel vulnerabilities
Ubuntu USN	USN-7088-2	Linux kernel vulnerabilities
Ubuntu USN	USN-7088-3	Linux kernel vulnerabilities
Ubuntu USN	USN-7088-4	Linux kernel vulnerabilities
Ubuntu USN	USN-7088-5	Linux kernel vulnerabilities
Ubuntu USN	USN-7100-1	Linux kernel vulnerabilities
Ubuntu USN	USN-7100-2	Linux kernel vulnerabilities
Ubuntu USN	USN-7119-1	Linux kernel (IoT) vulnerabilities
Ubuntu USN	USN-7121-1	Linux kernel vulnerabilities
Ubuntu USN	USN-7121-2	Linux kernel (Azure) vulnerabilities
Ubuntu USN	USN-7121-3	Linux kernel (Oracle) vulnerabilities
Ubuntu USN	USN-7123-1	Linux kernel (Azure) vulnerabilities
Ubuntu USN	USN-7144-1	Linux kernel (Intel IoTG) vulnerabilities
Ubuntu USN	USN-7148-1	Linux kernel vulnerabilities
Ubuntu USN	USN-7154-1	Linux kernel vulnerabilities
Ubuntu USN	USN-7155-1	Linux kernel (NVIDIA) vulnerabilities
Ubuntu USN	USN-7156-1	Linux kernel (GKE) vulnerabilities
Ubuntu USN	USN-7154-2	Linux kernel (HWE) vulnerabilities
Ubuntu USN	USN-7194-1	Linux kernel (Azure) vulnerabilities
Ubuntu USN	USN-7196-1	Linux kernel (Azure) vulnerabilities

No CVSS v4.0

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://lore.kernel.org/linux-cve-announce/2024091840-CVE-2024-46756-2ca6@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2024-46756
https://www.cve.org/CVERecord?id=CVE-2024-46756

History

Type	Values Removed	Values Added
First Time appeared		Redhat Redhat enterprise Linux
CPEs		cpe:/a:redhat:enterprise_linux:9 cpe:/o:redhat:enterprise_linux:9
Vendors & Products		Redhat Redhat enterprise Linux

Type	Values Removed	Values Added
CPEs	cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products	Linux Linux linux Kernel
References	https://git.kernel.org/stable/c/26825b62bd1bd3e53b4f44e0745cb516d5186343 https://git.kernel.org/stable/c/56cfdeb2c77291f0b5e4592731adfb6ca8fc7c24 https://git.kernel.org/stable/c/5c1de37969b7bc0abcb20b86e91e70caebbd4f89 https://git.kernel.org/stable/c/77ab0fd231c4ca873ec6908e761970360acc6df2 https://git.kernel.org/stable/c/8fecb75bff1b7d87a071c32a37aa0700f2be379d https://git.kernel.org/stable/c/93cf73a7bfdce683bde3a7bb65f270d3bd24497b https://git.kernel.org/stable/c/cc4be794c8d8c253770103e097ab9dbdb5f99ae1 https://git.kernel.org/stable/c/d92f0baf99a7e327dcceab37cce57c38aab1f691
Metrics	cvssV3_1 `{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}`	cvssV3_1 `{'score': 4.4, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'}`

Type	Values Removed	Values Added
Title	hwmon: (w83627ehf) Fix underflows seen when writing limit attributes	kernel: hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
Metrics	ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Type	Values Removed	Values Added
Description	In the Linux kernel, the following vulnerability has been resolved: hwmon: (w83627ehf) Fix underflows seen when writing limit attributes DIV_ROUND_CLOSEST() after kstrtol() results in an underflow if a large negative number such as -9223372036854775808 is provided by the user. Fix it by reordering clamp_val() and DIV_ROUND_CLOSEST() operations.	This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Type	Values Removed	Values Added
First Time appeared		Linux Linux linux Kernel
Weaknesses		CWE-191
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
Metrics	cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}`	cvssV3_1 `{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}`

Type	Values Removed	Values Added
References		https://lore.kernel.org/linux-cve-announce/2024091840-CVE-2024-46756-2ca6@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2024-46756 https://www.cve.org/CVERecord?id=CVE-2024-46756
Metrics	threat_severity `None`	cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}` threat_severity `Moderate`

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: hwmon: (w83627ehf) Fix underflows seen when writing limit attributes DIV_ROUND_CLOSEST() after kstrtol() results in an underflow if a large negative number such as -9223372036854775808 is provided by the user. Fix it by reordering clamp_val() and DIV_ROUND_CLOSEST() operations.
Title		hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
References		https://git.kernel.org/stable/c/26825b62bd1bd3e53b4f44e0745cb516d5186343 https://git.kernel.org/stable/c/56cfdeb2c77291f0b5e4592731adfb6ca8fc7c24 https://git.kernel.org/stable/c/5c1de37969b7bc0abcb20b86e91e70caebbd4f89 https://git.kernel.org/stable/c/77ab0fd231c4ca873ec6908e761970360acc6df2 https://git.kernel.org/stable/c/8fecb75bff1b7d87a071c32a37aa0700f2be379d https://git.kernel.org/stable/c/93cf73a7bfdce683bde3a7bb65f270d3bd24497b https://git.kernel.org/stable/c/cc4be794c8d8c253770103e097ab9dbdb5f99ae1 https://git.kernel.org/stable/c/d92f0baf99a7e327dcceab37cce57c38aab1f691