CVE-2024-47686

Summary

In the Linux kernel, the following vulnerability has been resolved:

ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()

The psc->div[] array has psc->num_div elements. These values come from when we call clk_hw_register_div(). It's adc_divisors and ARRAY_SIZE(adc_divisors)) and so on. So this condition needs to be >= instead of > to prevent an out of bounds read.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux9645ccc7bd7a16cd73c3be9dee70cd702b03be37 < 7a5bd2fb92388c51d267f6ce57c40f1cca8af1e0affected
LinuxLinux9645ccc7bd7a16cd73c3be9dee70cd702b03be37 < 66e78ade976dbd9bea09166aa8d66afc0963cde4affected
LinuxLinux9645ccc7bd7a16cd73c3be9dee70cd702b03be37 < 27f493e141823db052586010c1532b70b164507caffected
LinuxLinux9645ccc7bd7a16cd73c3be9dee70cd702b03be37 < ae59eaf36a1ad396e9f657ec9b8b52da6206ed5faffected
LinuxLinux9645ccc7bd7a16cd73c3be9dee70cd702b03be37 < c7f06284a6427475e3df742215535ec3f6cd9662affected
LinuxLinux5.16affected
LinuxLinux0 < 5.16unaffected
LinuxLinux6.1.113 <= 6.1.*unaffected
LinuxLinux6.6.54 <= 6.6.*unaffected
LinuxLinux6.10.13 <= 6.10.*unaffected
LinuxLinux6.11.2 <= 6.11.*unaffected
LinuxLinux6.12 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References