PT-2025-8759 · Linux+3 · Linux Kernel+3

Alexandre Belloni + 1 · Published 2024-12-11 · Updated 2026-04-20 · CVE-2024-57953

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to an integer overflow in the Linux kernel, specifically in the tps6594 rtc set offset() function. The problem occurs when the offset variable, which is a long in the range (-277774)-277774, is multiplied by TICKS PER HOUR, a large number approximately equal to a hundred million. This multiplication can cause an overflow on 32-bit systems, where a long can hold numbers up to approximately two billion.

Recommendations To resolve the issue, consider changing the type of TICKS PER HOUR to long long to prevent the integer overflow.

Exploit

Fix

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

BDU:2025-11918

CVE-2024-57953

USN-7521-1

USN-7521-2

USN-7521-3

USN-7651-1

USN-7651-2

USN-7651-3

USN-7651-4

USN-7651-5

USN-7651-6

USN-7652-1

USN-7653-1

USN-7737-1

Affected Products

Astra Linux

Linuxmint

Linux Kernel

Ubuntu

References · 326

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/57xxx/CVE-2024-57953.json · Exploit
• https://ubuntu.com/security/CVE-2025-21792 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21689 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-57997 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21674 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21766 · Vendor Advisory
• https://git.kernel.org/stable/c/53b0c7b15accb18d15d95c7fe68f61630ebfd1ca · Patch
• https://ubuntu.com/security/CVE-2025-38001 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-58076 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-58011 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21666 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7651-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21859 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7651-6 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21727 · Vendor Advisory