NetSight
IP …
high7.8

CVE-2024-26966

In the Linux kernel, the following vulnerability has been resolved: clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays The frequency table arra…

Impact

In the Linux kernel, the following vulnerability has been resolved: clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays The frequency table arrays are supposed to be terminated with an empty element. Add such entry to the end of the arrays where it is missing in order to avoid possible out-of-bound access when the table is traversed by functions like qcom_find_freq() or qcom_find_freq_floor(). Only compile tested.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.17 before 4.19.312
from 4.20 before 5.4.274
from 5.5 before 5.10.215
from 5.11 before 5.15.154
from 5.16 before 6.1.84
from 6.2 before 6.6.24
DebianDebian Linux
Version 10.0

Weakness classification

CWE-129

References