PT-2024-35671 · Belkin+3 · Belkin F9K1109+5

Published 2024-09-10 · Updated 2025-05-26 · CVE-2024-53223

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.43

Description The issue is related to the clock probe order in the Linux kernel for old ralink SoCs, specifically RT2880, RT305x, and RT3883. The base clocks must be defined first to avoid warnings and ensure a correct boot trace. A user of a Belkin f9k1109 version 1 device, which uses the RT3883 SoC, reported issues in openWRT. The problem occurs when fixed clocks are probed before the 'xtal' clock, causing a delay until 'xtal' is probed.

Recommendations For Linux kernel versions prior to 6.6.43, define a 'rt2880 xtal recalc rate()' function that returns the expected frequency of 40Mhz to ensure a correct boot trace with no warnings and a working clock plan from the beginning.

Exploit

Fix

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

BDU:2025-07749

CVE-2024-53223

OESA-2025-1093

OESA-2025-1097

USN-7276-1

USN-7277-1

USN-7310-1

USN-7449-1

USN-7449-2

USN-7450-1

USN-7451-1

USN-7452-1

USN-7453-1

USN-7468-1

USN-7523-1

USN-7524-1

Affected Products

Belkin F9K1109

Linuxmint

Rt2880

Rt305X

Rt3883

Ubuntu

References · 1236

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/53xxx/CVE-2024-53223.json · Exploit
• https://ubuntu.com/security/CVE-2024-53166 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50059 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56602 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56594 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50185 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-56769 · Security Note
• https://ubuntu.com/security/CVE-2024-50016 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-49943 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50249 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50211 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-49907 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-49868 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50205 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50151 · Vendor Advisory