PT-2024-7905 · Linux+6 · Linux Kernel+6
Published
2024-03-02
·
Updated
2025-09-29
·
CVE-2024-26969
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to the Linux kernel's clock driver, specifically the qcom component. It involves a potential out-of-bounds access when traversing frequency table arrays. The arrays are supposed to be terminated with an empty element, but in some cases, this element is missing, which could lead to out-of-bounds access when functions like
qcom find freq() or qcom find freq floor() are used. There is no information provided about the estimated number of potentially affected devices or real-world incidents where this issue was exploited.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Out of bounds Read
Improper Validation of Array Index
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu