CVE-2024-53158

Summary

In the Linux kernel, the following vulnerability has been resolved:

soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()

This loop is supposed to break if the frequency returned from clk_round_rate() is the same as on the previous iteration. However, that check doesn't make sense on the first iteration through the loop. It leads to reading before the start of these->clk_perf_tbl[] array.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxeddac5af06546d2e7a0730e3dc02dde3dc91098a < 37cdd4f0c266560b7b924c42361eeae3dc5f0c3eaffected
LinuxLinuxeddac5af06546d2e7a0730e3dc02dde3dc91098a < 7a3465b79ef0539aa10b310ac3cc35e0ae25b79eaffected
LinuxLinuxeddac5af06546d2e7a0730e3dc02dde3dc91098a < 748557ca7dc94695a6e209eb68fce365da9a3bb3affected
LinuxLinuxeddac5af06546d2e7a0730e3dc02dde3dc91098a < f4b7bf5a50f1fa25560f0b66a13563465542861baffected
LinuxLinuxeddac5af06546d2e7a0730e3dc02dde3dc91098a < b0a9c6ccaf88c4701787f61ecd2ec0eb014a0677affected
LinuxLinuxeddac5af06546d2e7a0730e3dc02dde3dc91098a < c24e019ca12d9ec814af04b30a64dd7173fb20feaffected
LinuxLinuxeddac5af06546d2e7a0730e3dc02dde3dc91098a < 56eda41dcce0ec4d3418b4f85037bdea181486ccaffected
LinuxLinuxeddac5af06546d2e7a0730e3dc02dde3dc91098a < 351bb7f9ecb9d1f09bd7767491a2b8d07f4f1ea4affected
LinuxLinuxeddac5af06546d2e7a0730e3dc02dde3dc91098a < 78261cb08f06c93d362cab5c5034bf5899bc7552affected
LinuxLinux4.18affected
LinuxLinux0 < 4.18unaffected
LinuxLinux4.19.325 <= 4.19.*unaffected
LinuxLinux5.4.287 <= 5.4.*unaffected
LinuxLinux5.10.231 <= 5.10.*unaffected
LinuxLinux5.15.174 <= 5.15.*unaffected
LinuxLinux6.1.120 <= 6.1.*unaffected
LinuxLinux6.6.64 <= 6.6.*unaffected
LinuxLinux6.11.11 <= 6.11.*unaffected
LinuxLinux6.12.2 <= 6.12.*unaffected
LinuxLinux6.13 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References