NetSight
IP …
high7.1

CVE-2024-41028

In the Linux kernel, the following vulnerability has been resolved: platform/x86: toshiba_acpi: Fix array out-of-bounds access In order to use toshiba_dmi_quir…

Impact

In the Linux kernel, the following vulnerability has been resolved: platform/x86: toshiba_acpi: Fix array out-of-bounds access In order to use toshiba_dmi_quirks[] together with the standard DMI matching functions, it must be terminated by a empty entry. Since this entry is missing, an array out-of-bounds access occurs every time the quirk list is processed. Fix this by adding the terminating empty entry.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 6.1 before 6.1.100
from 6.2 before 6.6.41
from 6.7 before 6.9.10
Version 6.10

Weakness classification

CWE-129

References