CVE-2024-26966

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-26966
In the Linux kernel, the following vulnerability has been resolved: clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays The frequency table arrays are supposed to be terminated with an empty element. Add such entry to the end of the arrays where it is missing in order to avoid possible out-of-bound access when the table is traversed by functions like qcom_find_freq() or qcom_find_freq_floor(). Only compile tested.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/185de0b7cdeaad8b89ebd4c8a258ff2f21adba99 Patch
https://git.kernel.org/stable/c/3aedcf3755c74dafc187eb76acb04e3e6348b1a9 Patch
https://git.kernel.org/stable/c/5533686e99b04994d7c4877dc0e4282adc9444a2 Patch
https://git.kernel.org/stable/c/5638330150db2cc30b53eed04e481062faa3ece8 Patch
https://git.kernel.org/stable/c/7e5432401536117c316d7f3b21d46b64c1514f38 Patch
https://git.kernel.org/stable/c/9b4c4546dd61950e80ffdca1bf6925f42b665b03 Patch
https://git.kernel.org/stable/c/a09aecb6cb482de88301c43bf00a6c8726c4d34f Patch
https://git.kernel.org/stable/c/a903cfd38d8dee7e754fb89fd1bebed99e28003d Patch
https://git.kernel.org/stable/c/b2dfb216f32627c2f6a8041f2d9d56d102ab87c0 Patch
https://git.kernel.org/stable/c/185de0b7cdeaad8b89ebd4c8a258ff2f21adba99 Patch
https://git.kernel.org/stable/c/3aedcf3755c74dafc187eb76acb04e3e6348b1a9 Patch
https://git.kernel.org/stable/c/5533686e99b04994d7c4877dc0e4282adc9444a2 Patch
https://git.kernel.org/stable/c/5638330150db2cc30b53eed04e481062faa3ece8 Patch
https://git.kernel.org/stable/c/7e5432401536117c316d7f3b21d46b64c1514f38 Patch
https://git.kernel.org/stable/c/9b4c4546dd61950e80ffdca1bf6925f42b665b03 Patch
https://git.kernel.org/stable/c/a09aecb6cb482de88301c43bf00a6c8726c4d34f Patch
https://git.kernel.org/stable/c/a903cfd38d8dee7e754fb89fd1bebed99e28003d Patch
https://git.kernel.org/stable/c/b2dfb216f32627c2f6a8041f2d9d56d102ab87c0 Patch
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html Mailing List Third Party Advisory
https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html Mailing List Third Party Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
History

23 Dec 2024, 13:50

Type Values Removed Values Added
CWE CWE-129
References () https://git.kernel.org/stable/c/185de0b7cdeaad8b89ebd4c8a258ff2f21adba99 - () https://git.kernel.org/stable/c/185de0b7cdeaad8b89ebd4c8a258ff2f21adba99 - Patch
References () https://git.kernel.org/stable/c/3aedcf3755c74dafc187eb76acb04e3e6348b1a9 - () https://git.kernel.org/stable/c/3aedcf3755c74dafc187eb76acb04e3e6348b1a9 - Patch
References () https://git.kernel.org/stable/c/5533686e99b04994d7c4877dc0e4282adc9444a2 - () https://git.kernel.org/stable/c/5533686e99b04994d7c4877dc0e4282adc9444a2 - Patch
References () https://git.kernel.org/stable/c/5638330150db2cc30b53eed04e481062faa3ece8 - () https://git.kernel.org/stable/c/5638330150db2cc30b53eed04e481062faa3ece8 - Patch
References () https://git.kernel.org/stable/c/7e5432401536117c316d7f3b21d46b64c1514f38 - () https://git.kernel.org/stable/c/7e5432401536117c316d7f3b21d46b64c1514f38 - Patch
References () https://git.kernel.org/stable/c/9b4c4546dd61950e80ffdca1bf6925f42b665b03 - () https://git.kernel.org/stable/c/9b4c4546dd61950e80ffdca1bf6925f42b665b03 - Patch
References () https://git.kernel.org/stable/c/a09aecb6cb482de88301c43bf00a6c8726c4d34f - () https://git.kernel.org/stable/c/a09aecb6cb482de88301c43bf00a6c8726c4d34f - Patch
References () https://git.kernel.org/stable/c/a903cfd38d8dee7e754fb89fd1bebed99e28003d - () https://git.kernel.org/stable/c/a903cfd38d8dee7e754fb89fd1bebed99e28003d - Patch
References () https://git.kernel.org/stable/c/b2dfb216f32627c2f6a8041f2d9d56d102ab87c0 - () https://git.kernel.org/stable/c/b2dfb216f32627c2f6a8041f2d9d56d102ab87c0 - Patch
References () https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html - () https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html - Mailing List, Third Party Advisory
References () https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html - () https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html - Mailing List, Third Party Advisory
First Time Debian debian Linux
Debian
Linux
Linux linux Kernel
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

21 Nov 2024, 09:03

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html -
  • () https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html -
References () https://git.kernel.org/stable/c/185de0b7cdeaad8b89ebd4c8a258ff2f21adba99 - () https://git.kernel.org/stable/c/185de0b7cdeaad8b89ebd4c8a258ff2f21adba99 -
References () https://git.kernel.org/stable/c/3aedcf3755c74dafc187eb76acb04e3e6348b1a9 - () https://git.kernel.org/stable/c/3aedcf3755c74dafc187eb76acb04e3e6348b1a9 -
References () https://git.kernel.org/stable/c/5533686e99b04994d7c4877dc0e4282adc9444a2 - () https://git.kernel.org/stable/c/5533686e99b04994d7c4877dc0e4282adc9444a2 -
References () https://git.kernel.org/stable/c/5638330150db2cc30b53eed04e481062faa3ece8 - () https://git.kernel.org/stable/c/5638330150db2cc30b53eed04e481062faa3ece8 -
References () https://git.kernel.org/stable/c/7e5432401536117c316d7f3b21d46b64c1514f38 - () https://git.kernel.org/stable/c/7e5432401536117c316d7f3b21d46b64c1514f38 -
References () https://git.kernel.org/stable/c/9b4c4546dd61950e80ffdca1bf6925f42b665b03 - () https://git.kernel.org/stable/c/9b4c4546dd61950e80ffdca1bf6925f42b665b03 -
References () https://git.kernel.org/stable/c/a09aecb6cb482de88301c43bf00a6c8726c4d34f - () https://git.kernel.org/stable/c/a09aecb6cb482de88301c43bf00a6c8726c4d34f -
References () https://git.kernel.org/stable/c/a903cfd38d8dee7e754fb89fd1bebed99e28003d - () https://git.kernel.org/stable/c/a903cfd38d8dee7e754fb89fd1bebed99e28003d -
References () https://git.kernel.org/stable/c/b2dfb216f32627c2f6a8041f2d9d56d102ab87c0 - () https://git.kernel.org/stable/c/b2dfb216f32627c2f6a8041f2d9d56d102ab87c0 -

05 Nov 2024, 10:16

Type Values Removed Values Added
References
  • {'url': 'https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html', 'source': '416baaa9-dc9f-4396-8d5f-8c081fb06d67'}
  • {'url': 'https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html', 'source': '416baaa9-dc9f-4396-8d5f-8c081fb06d67'}

27 Jun 2024, 12:15

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html -

25 Jun 2024, 22:15

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html -
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: clk: qcom: mmcc-apq8084: corrección de terminación de matrices de tablas de frecuencia Se supone que las matrices de tablas de frecuencia terminan con un elemento vacío. Agregue dicha entrada al final de las matrices donde falta para evitar un posible acceso fuera de los límites cuando la tabla es atravesada por funciones como qcom_find_freq() o qcom_find_freq_floor(). Solo compilar probado.

01 May 2024, 06:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-01 06:15

Updated : 2024-12-23 13:50

NVD link : CVE-2024-26966

Mitre link : CVE-2024-26966

CVE.ORG link : CVE-2024-26966

JSON object : View

Products Affected

linux

  • linux_kernel

debian

  • debian_linux
CWE
CWE-129

Improper Validation of Array Index