PT-2024-32739 · Linux+6 · Linux Kernel+6
Published
2024-09-11
·
Updated
2025-09-29
·
CVE-2024-47686
CVSS v3.1
7.1
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.58
Description
The issue is related to an off-by-one error in the
ep93xx div recalc rate() function, which can lead to an out-of-bounds read. The psc->div[] array has psc->num div elements, and the condition should be >= instead of > to prevent this issue. This error occurs when calling clk hw register div() and is related to adc divisors and ARRAY SIZE(adc divisors).Recommendations
For Linux kernel versions prior to 6.6.58, update to version 6.6.58 or later to resolve the issue. As a temporary workaround, consider modifying the condition in the
ep93xx div recalc rate() function to >= instead of > to prevent the out-of-bounds read. However, this modification should be done with caution and ideally by applying the official patch or updating the kernel.Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu