CVE-2024-26970

Summary

In the Linux kernel, the following vulnerability has been resolved:

clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays

The frequency table arrays are supposed to be terminated with an empty element. Add such entry to the end of the arrays where it is missing in order to avoid possible out-of-bound access when the table is traversed by functions like qcom_find_freq() or qcom_find_freq_floor().

Only compile tested.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxd9db07f088af01a1080d01de363141b673c7d646 < ae60e3342296f766f88911d39199f77b05f657a6affected
LinuxLinuxd9db07f088af01a1080d01de363141b673c7d646 < b4527ee3de365a742215773d20f07db3e2c06f3baffected
LinuxLinuxd9db07f088af01a1080d01de363141b673c7d646 < 852db52b45ea96dac2720f108e7c7331cd3738bbaffected
LinuxLinuxd9db07f088af01a1080d01de363141b673c7d646 < 421b135aceace99789c982f6a77ce9476564fb52affected
LinuxLinuxd9db07f088af01a1080d01de363141b673c7d646 < dcb13b5c9ae8743f99a96f392186527c3df89198affected
LinuxLinuxd9db07f088af01a1080d01de363141b673c7d646 < db4066e3ab6b3d918ae2b92734a89c04fe82cc1daffected
LinuxLinuxd9db07f088af01a1080d01de363141b673c7d646 < cdbc6e2d8108bc47895e5a901cfcaf799b00ca8daffected
LinuxLinux5.6affected
LinuxLinux0 < 5.6unaffected
LinuxLinux5.10.215 <= 5.10.*unaffected
LinuxLinux5.15.154 <= 5.15.*unaffected
LinuxLinux6.1.84 <= 6.1.*unaffected
LinuxLinux6.6.24 <= 6.6.*unaffected
LinuxLinux6.7.12 <= 6.7.*unaffected
LinuxLinux6.8.3 <= 6.8.*unaffected
LinuxLinux6.9 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References