PT-2025-8759 · Linux+3 · Linux Kernel+3
Alexandre Belloni
+1
·
Publicado
2024-12-11
·
Atualizado
2026-04-20
·
CVE-2024-57953
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to an integer overflow in the Linux kernel, specifically in the
tps6594 rtc set offset() function. The problem occurs when the offset variable, which is a long in the range (-277774)-277774, is multiplied by TICKS PER HOUR, a large number approximately equal to a hundred million. This multiplication can cause an overflow on 32-bit systems, where a long can hold numbers up to approximately two billion.Recommendations
To resolve the issue, consider changing the type of
TICKS PER HOUR to long long to prevent the integer overflow.Exploit
Correção
Integer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Astra Linux
Linuxmint
Linux Kernel
Ubuntu