CVE-2026-74685 is a vulnerability in Linux Kernel
Published on August 22, 2026
hwmon: (ltc4282) Clamp negative current limits
In the Linux kernel, the following vulnerability has been resolved:
hwmon: (ltc4282) Clamp negative current limits
When a negative value is passed to ltc4282_write_curr(), the signed long
val is cast directly to u64:
drivers/hwmon/ltc4282.c:ltc4282_write_curr() {
/* need to pass it in millivolt */
u32 in = DIV_ROUND_CLOSEST_ULL((u64)val * st->rsense, DECA * MICRO);
...
}
This cast converts negative inputs into large positive values. The
subsequent division result overflows the u32 in variable, truncating
to a pseudo-random positive value. When this is passed to
ltc4282_write_voltage_byte(), it is clamped to the maximum limit instead
of zero.
Clamp val to 0 and to the maximum supported upper limit before the cast
and assign the result to a 64-bit temporary variable before the division
to avoid the underflow and an also possible overflow.
Products Associated with CVE-2026-74685
Want to know whenever a new CVE is published for Linux Kernel? stack.watch will email you.
Affected Versions
Linux:- Version cbc29538dbf7d7400f1ffc5dd5713e6a551463a0 and below 60e06c4dba696173982393252a40ceb7dd2eec18 is affected.
- Version cbc29538dbf7d7400f1ffc5dd5713e6a551463a0 and below de58b90a4d1417c15b693eb04c0ce6bc925d84c6 is affected.
- Version cbc29538dbf7d7400f1ffc5dd5713e6a551463a0 and below 046e56b53c09375ef39903514496aa5508db9729 is affected.
- Version cbc29538dbf7d7400f1ffc5dd5713e6a551463a0 and below e253dd5f9f6d875a317895bf43ec9534ed7523cb is affected.
- Version 6.9 is affected.
- Before 6.9 is unaffected.
- Version 6.12.104, <= 6.12.* is unaffected.
- Version 6.18.45, <= 6.18.* is unaffected.
- Version 7.1.9, <= 7.1.* is unaffected.
- Version 7.2, <= * is unaffected.