]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
hwmon: (dell-smm) Limit fan multiplier to avoid overflow
authorDenis Sergeev <denserg.edu@gmail.com>
Tue, 9 Dec 2025 06:37:06 +0000 (09:37 +0300)
committerGuenter Roeck <linux@roeck-us.net>
Sun, 14 Dec 2025 17:34:38 +0000 (09:34 -0800)
commit46c28bbbb150b80827e4bcbea231560af9d16854
tree262d2f294074745b37b985c922aa953bd27ea786
parent8f0b4cce4481fb22653697cced8d0d04027cb1e8
hwmon: (dell-smm) Limit fan multiplier to avoid overflow

The fan nominal speed returned by SMM is limited to 16 bits, but the
driver allows the fan multiplier to be set via a module parameter.

Clamp the computed fan multiplier so that fan_nominal_speed *
i8k_fan_mult always fits into a signed 32-bit integer and refuse to
initialize the driver if the value is too large.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Fixes: 20bdeebc88269 ("hwmon: (dell-smm) Introduce helper function for data init")
Signed-off-by: Denis Sergeev <denserg.edu@gmail.com>
Link: https://lore.kernel.org/r/20251209063706.49008-1-denserg.edu@gmail.com
Signed-off-by: Guenter Roeck <linux@roeck-us.net>
drivers/hwmon/dell-smm-hwmon.c