The vulnerability occurs in the Linux kernel’s LTC4282 hardware monitor driver when a negative current value is supplied to the write routine. The signed long value is cast to an unsigned 64‑bit variable, turning the negative input into a very large positive number. Subsequent arithmetic overflows and truncation result in an apparently random positive value that the driver finally clamps to the maximum permitted current limit instead of zero, preventing the intended low‑current protection. This flaw could allow an over‑current condition that may damage the hardware component or compromise system reliability.

Any Linux system that builds the kernel with the ltc4282 driver enabled is affected. The driver is used for power monitoring on certain boards and is included in the mainstream kernel tree. The exact kernel version is not specified, so any kernel snapshot containing the ltc4282 code is potentially vulnerable until the patch is merged.

Based on the description, the flaw requires a negative value to be written through the driver’s write interface, a capability that is available only to kernel code or privileged processes. No publicly available remote exploit or proof‑of‑concept has been documented, and the issue is not listed in CISA’s KEV catalog. The EPSS score is < 1%, indicating a very low publicly observed exploitation probability. The CVSS score of 5.5 indicates a moderate severity. Because the attack vector needs kernel privileges, the risk is limited to compromised or locally privileged adversaries. The potential impact, if exploited, is over‑current that could damage the device or destabilize the system, but the very low EPSS score reduces the immediacy of this threat compared to publicly exposed vulnerabilities.