CVE-2024-26599

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-26599
In the Linux kernel, the following vulnerability has been resolved: pwm: Fix out-of-bounds access in of_pwm_single_xlate() With args->args_count == 2 args->args[2] is not defined. Actually the flags are contained in args->args[1].

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/7b85554c7c2aee91171e038e4d5442ffa130b282 Patch
https://git.kernel.org/stable/c/a297d07b9a1e4fb8cda25a4a2363a507d294b7c9 Patch
https://git.kernel.org/stable/c/bae45b7ebb31984b63b13c3519fd724b3ce92123 Patch
https://git.kernel.org/stable/c/e5f2b4b62977fb6c2efcbc5779e0c9dce18215f7 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

17 Apr 2024, 19:34

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: pwm: corrige el acceso fuera de los límites en of_pwm_single_xlate() Con args->args_count == 2 args->args[2] no está definido. En realidad, las banderas están contenidas en args->args[1].
First Time Linux linux Kernel
Linux
CWE CWE-119
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/7b85554c7c2aee91171e038e4d5442ffa130b282 - () https://git.kernel.org/stable/c/7b85554c7c2aee91171e038e4d5442ffa130b282 - Patch
References () https://git.kernel.org/stable/c/a297d07b9a1e4fb8cda25a4a2363a507d294b7c9 - () https://git.kernel.org/stable/c/a297d07b9a1e4fb8cda25a4a2363a507d294b7c9 - Patch
References () https://git.kernel.org/stable/c/bae45b7ebb31984b63b13c3519fd724b3ce92123 - () https://git.kernel.org/stable/c/bae45b7ebb31984b63b13c3519fd724b3ce92123 - Patch
References () https://git.kernel.org/stable/c/e5f2b4b62977fb6c2efcbc5779e0c9dce18215f7 - () https://git.kernel.org/stable/c/e5f2b4b62977fb6c2efcbc5779e0c9dce18215f7 - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8

23 Feb 2024, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-02-23 15:15

Updated : 2024-04-17 19:34

NVD link : CVE-2024-26599

Mitre link : CVE-2024-26599

CVE.ORG link : CVE-2024-26599

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer