CVE-2024-53159

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The issue is related to a buffer overflow in the Linux kernel's hwmon component, specifically in the nct6775-core driver. This occurs when the DIV ROUND CLOSEST() function is used after kstrtoul(), potentially allowing an attacker to impact the availability of protected information. The problem arises when a large number, such as 18446744073709551615, is provided by the user, resulting in an overflow.

Recommendations: To resolve the issue, reorder the clamp val() and DIV ROUND CLOSEST() operations to prevent overflows when writing limit attributes. At the moment, there is no information about a newer version that contains a fix for this vulnerability.