NetSight
IP …
medium5.5

CVE-2024-53158

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get() This loop is supposed to b…

Impact

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get() This loop is supposed to break if the frequency returned from clk_round_rate() is the same as on the previous iteration. However, that check doesn't make sense on the first iteration through the loop. It leads to reading before the start of these->clk_perf_tbl[] array.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.18 before 4.19.325
from 4.20 before 5.4.287
from 5.5 before 5.10.231
from 5.11 before 5.15.174
from 5.16 before 6.1.120
from 6.2 before 6.6.64

References