CVE-2021-47098

hwmon: (lm90) Prevent integer overflow/underflow in hysteresis calculations

State
Published
Severity
Not scored
Published
Mar 4, 2024
Updated
May 11, 2026
Reserved
Feb 29, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

hwmon: (lm90) Prevent integer overflow/underflow in hysteresis calculations

Commit b50aa49638c7 ("hwmon: (lm90) Prevent integer underflows of temperature calculations") addressed a number of underflow situations when writing temperature limits. However, it missed one situation, seen when an attempt is made to set the hysteresis value to MAX_LONG and the critical temperature limit is negative.

Use clamp_val() when setting the hysteresis temperature to ensure that the provided value can never overflow or underflow.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • b50aa49638c7e12abf4ecc483f4e928c5cccc1b0 to before d105f30bea9104c590a9e5b495cb8a49bdfe405fAffected
  • b50aa49638c7e12abf4ecc483f4e928c5cccc1b0 to before 55840b9eae5367b5d5b29619dc2fb7e4596dba46Affected
LinuxLinux
  • 5.14Affected
  • before 5.14Not affected
  • 5.15.12 through 5.15.*Not affected
  • 5.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.