CVE-2024-26711

Summary

In the Linux kernel, the following vulnerability has been resolved:

iio: adc: ad4130: zero-initialize clock init data

The clk_init_data struct does not have all its members initialized, causing issues when trying to expose the internal clock on the CLK pin.

Fix this by zero-initializing the clk_init_data struct.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux62094060cf3acaf52e277457d807ea753269b89e < 0e0dab37750926d4fb0144edb1c1ea0612fea273affected
LinuxLinux62094060cf3acaf52e277457d807ea753269b89e < 02876e2df02f8b17a593d77a0a7879a8109b27e1affected
LinuxLinux62094060cf3acaf52e277457d807ea753269b89e < a22b0a2be69a36511cb5b37d948b651ddf7debf3affected
LinuxLinux6.2affected
LinuxLinux0 < 6.2unaffected
LinuxLinux6.6.18 <= 6.6.*unaffected
LinuxLinux6.7.6 <= 6.7.*unaffected
LinuxLinux6.8 <= *unaffected

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References