PT-2024-6859 · Linux+2 · Linux Kernel+2
Dan Carpenter
·
Published
2024-07-04
·
Updated
2025-01-09
·
CVE-2024-43852
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to an error in the calculation of an index in the
ltc2991 is visible() function of the Linux kernel. This error can lead to reading beyond the end of an array, specifically the st->temp en[] array, which has LTC2991 MAX CHANNEL (4) elements. If the channel is equal to LTC2991 T INT CH NR (4), it results in accessing an element beyond the array's bounds. The fix involves reordering conditions to check if the channel is valid before using it as an array index. This issue can potentially impact the confidentiality, integrity, and availability of protected information.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linuxmint
Linux Kernel
Ubuntu