PT-2024-7285 · Linux+1 · Linux Kernel+1

Erhard Furtner · Published 2024-02-21 · Updated 2024-10-22 · CVE-2024-26730

Positive Technologies (AI Summary)

CVSS v3.1

7.0

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The issue is related to the nct6775 component of the Linux kernel, which is associated with errors reading beyond the buffer boundaries. This can result in access errors being reported if KASAN is enabled. The problem arises because the number of temperature configuration registers does not always match the total number of temperature registers. There is a global-out-of-bounds error in the nct6775 probe function.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Out of bounds Read

Memory Corruption

Weakness Enumeration

CWE-125

CWE-787

Related Identifiers

BDU:2024-08639

CVE-2024-26730

Affected Products

Linux Kernel

Red Os

References · 24

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/26xxx/CVE-2024-26730.json · Exploit
• https://git.kernel.org/stable/c/d56e460e19ea8382f813eb489730248ec8d7eb73 · Patch
• https://cve.org/CVERecord?id=CVE-2024-26730 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-26730 · Vendor Advisory
• https://git.kernel.org/stable/c/f006c45a3ea424f8f6c8e4b9283bc245ce2a4d0f · Patch
• https://osv.dev/vulnerability/BELL-CVE-2024-26730 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-26730 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2024-26730 · Vendor Advisory
• https://git.kernel.org/stable/c/c196387820c9214c5ceaff56d77303c82514b8b1 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-26730 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-08639 · Security Note
• https://ubuntu.com/security/CVE-2024-26730 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-26730 · Vendor Advisory
• https://redos.red-soft.ru/support/secure · Note
• https://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.19 · Note