PT-2024-9928 · Linux+7 · Linux Kernel+7
Published
2024-09-30
·
Updated
2025-10-03
·
CVE-2024-53158
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
The issue is related to an array underflow in the
geni se clk tbl get() function of the QCOM GENI Serial Engine Driver in the Linux kernel. This underflow occurs because a loop does not properly break when the frequency returned from clk round rate() is the same as on the previous iteration, leading to reading before the start of the these->clk perf tbl[] array. This can cause a denial of service.Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu