{
  "cveId": "CVE-2026-74685",
  "url": "https://patchblox.com/security/cve/CVE-2026-74685",
  "summary": "CVE-2026-74685 is fixed in 2 products on 1 platform, first by DEBIAN-CVE-2026-74685, released August 27, 2026. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  hwmon: (ltc4282) Clamp negative current limits...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  hwmon: (ltc4282) Clamp negative current limits  When a negative value is passed to ltc4282_write_curr(), the signed long val is cast directly to u64:  drivers/hwmon/ltc4282.c:ltc4282_write_curr() {         /* need to pass it in millivolt */         u32 in = DIV_ROUND_CLOSEST_ULL((u64)val * st-\u003Ersense, DECA * MICRO);         ... }  This cast converts negative inputs into large positive values. The subsequent division result overflows the u32 in variable, truncating to a pseudo-random positive value. When this is passed to ltc4282_write_voltage_byte(), it is clamped to the maximum limit instead of zero.  Clamp val to 0 and to the maximum supported upper limit before the cast and assign the result to a 64-bit temporary variable before the division to avoid the underflow and an also possible overflow.",
  "published": "2026-08-22T16:16:42Z",
  "severity": "",
  "epss": 0.00168,
  "epssPercentile": 0.06114,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.12.105-1",
      "fix": "DEBIAN-CVE-2026-74685",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-74685",
      "released": "2026-08-27T00:27:02Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "7.1.9-1",
      "fix": "DEBIAN-CVE-2026-74685",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-74685",
      "released": "2026-08-27T00:27:02Z"
    },
    {
      "platform": "linux",
      "product": "linux-6.12",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.12.107-1~deb12u1",
      "fix": "DEBIAN-CVE-2026-74685",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-74685",
      "released": "2026-08-27T00:27:02Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}