CVE-2024-26968
clk: qcom: gcc-ipq9574: fix terminating of frequency table arrays
Description
In the Linux kernel, the following vulnerability has been resolved: clk: qcom: gcc-ipq9574: fix terminating of frequency table arrays The frequency table arrays are supposed to be terminated with an empty element. Add such entry to the end of the arrays where it is missing in order to avoid possible out-of-bound access when the table is traversed by functions like qcom_find_freq() or qcom_find_freq_floor(). Only compile tested.
INFO
Published Date :
May 1, 2024, 6:15 a.m.
Last Modified :
Dec. 23, 2024, 1:54 p.m.
Remotely Exploit :
No
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
CVSS Scores
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS 3.1 | MEDIUM | [email protected] |
Solution
- Update the Linux kernel package.
- Reboot the system after the update.
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2024-26968.
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2024-26968 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2024-26968
weaknesses.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2024-26968 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2024-26968 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
Initial Analysis by [email protected]
Dec. 23, 2024
Action Type Old Value New Value Added CVSS V3.1 NIST AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Added CWE NIST CWE-129 Added CPE Configuration OR *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.4 up to (excluding) 6.6.24 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.7 up to (excluding) 6.7.12 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.8 up to (excluding) 6.8.3 Changed Reference Type https://git.kernel.org/stable/c/0204247cf3669b6021fb745c3b7f37ae392ab19c No Types Assigned https://git.kernel.org/stable/c/0204247cf3669b6021fb745c3b7f37ae392ab19c Patch Changed Reference Type https://git.kernel.org/stable/c/0204247cf3669b6021fb745c3b7f37ae392ab19c No Types Assigned https://git.kernel.org/stable/c/0204247cf3669b6021fb745c3b7f37ae392ab19c Patch Changed Reference Type https://git.kernel.org/stable/c/1723629fea8a4e75333196866e10d395463dca72 No Types Assigned https://git.kernel.org/stable/c/1723629fea8a4e75333196866e10d395463dca72 Patch Changed Reference Type https://git.kernel.org/stable/c/1723629fea8a4e75333196866e10d395463dca72 No Types Assigned https://git.kernel.org/stable/c/1723629fea8a4e75333196866e10d395463dca72 Patch Changed Reference Type https://git.kernel.org/stable/c/604f2d7c46727c5e24fc7faddc980bc1cc0b1011 No Types Assigned https://git.kernel.org/stable/c/604f2d7c46727c5e24fc7faddc980bc1cc0b1011 Patch Changed Reference Type https://git.kernel.org/stable/c/604f2d7c46727c5e24fc7faddc980bc1cc0b1011 No Types Assigned https://git.kernel.org/stable/c/604f2d7c46727c5e24fc7faddc980bc1cc0b1011 Patch Changed Reference Type https://git.kernel.org/stable/c/bd2b6395671d823caa38d8e4d752de2448ae61e1 No Types Assigned https://git.kernel.org/stable/c/bd2b6395671d823caa38d8e4d752de2448ae61e1 Patch Changed Reference Type https://git.kernel.org/stable/c/bd2b6395671d823caa38d8e4d752de2448ae61e1 No Types Assigned https://git.kernel.org/stable/c/bd2b6395671d823caa38d8e4d752de2448ae61e1 Patch -
CVE Modified by af854a3a-2127-422b-91ae-364da2661108
Nov. 21, 2024
Action Type Old Value New Value Added Reference https://git.kernel.org/stable/c/0204247cf3669b6021fb745c3b7f37ae392ab19c Added Reference https://git.kernel.org/stable/c/1723629fea8a4e75333196866e10d395463dca72 Added Reference https://git.kernel.org/stable/c/604f2d7c46727c5e24fc7faddc980bc1cc0b1011 Added Reference https://git.kernel.org/stable/c/bd2b6395671d823caa38d8e4d752de2448ae61e1 -
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
May. 29, 2024
Action Type Old Value New Value -
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
May. 14, 2024
Action Type Old Value New Value -
CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
May. 01, 2024
Action Type Old Value New Value Added Description In the Linux kernel, the following vulnerability has been resolved: clk: qcom: gcc-ipq9574: fix terminating of frequency table arrays The frequency table arrays are supposed to be terminated with an empty element. Add such entry to the end of the arrays where it is missing in order to avoid possible out-of-bound access when the table is traversed by functions like qcom_find_freq() or qcom_find_freq_floor(). Only compile tested. Added Reference kernel.org https://git.kernel.org/stable/c/0204247cf3669b6021fb745c3b7f37ae392ab19c [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/1723629fea8a4e75333196866e10d395463dca72 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/604f2d7c46727c5e24fc7faddc980bc1cc0b1011 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/bd2b6395671d823caa38d8e4d752de2448ae61e1 [No types assigned]