CVE-2026-74685

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the ltc4282 write curr() function within the hwmon module. When a negative value is provided to the val variable, it is cast directly to an unsigned 64-bit integer (u64), which converts the negative input into a very large positive value. This leads to an overflow of the u32 in variable during a subsequent division, resulting in a pseudo-random positive value. When this value is processed by the ltc4282 write voltage byte() function, it is incorrectly clamped to the maximum limit instead of being set to zero.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.