Linux hwe edge: In the Linux kernel, the following vulnerability has been resolved: hwmon: (ltc4282) Clamp negative current limits When a negative value is passed… (CVE-2026-74685)

The Linux kernel hwmon driver for LTC4282 improperly handles negative current limit values in the ltc4282_write_curr() function. A negative signed long input is cast directly to a u64, converting it into a large positive value. This leads to an overflow when dividing and truncating to a u32 variable, resulting in a pseudo-random positive value. This value is then clamped to the maximum limit instead of zero when passed to ltc4282_write_voltage_byte(). The fix clamps the input value to the range [0, maximum supported limit] before casting and division to prevent underflow and overflow.

The vulnerability may cause the driver to write incorrect current limit values to the hardware, potentially leading to hardware misbehavior or incorrect power management. The exact impact depends on the hardware and usage context. No known exploits are reported in the wild.

A fix has been implemented in the Linux kernel to clamp negative current limit values to zero and the maximum supported limit before casting and division. Users should update to a kernel version that includes this fix. Since this is a kernel-level fix, applying the official kernel update from the vendor or distribution is the recommended remediation.