CVE-2024-26730CWE-787

CVE-2024-26730

High · published April 3, 2024

CVSS v3.1
7.3
EPSS
0%
Percentile
15.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

hwmon: (nct6775) Fix access to temperature configuration registers

The number of temperature configuration registers does

not always match the total number of temperature registers.

This can result in access errors reported if KASAN is enabled.

BUG: KASAN: global-out-of-bounds in nct6775_probe+0x5654/0x6fe9 nct6775_core

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00250 · 15.4th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2024-04-03T21:15Z
Affected products (8)
ProductVersionsFixed in
linux/linux_kernel≥ 6.6, < 6.6.196.6.19
linux/linux_kernel≥ 6.7, < 6.7.76.7.7
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (7)
https://git.kernel.org/stable/c/745aa03c513f1ba12cb98495467676f7acf3fffd · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/c196387820c9214c5ceaff56d77303c82514b8b1 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/d56e460e19ea8382f813eb489730248ec8d7eb73 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/f006c45a3ea424f8f6c8e4b9283bc245ce2a4d0f · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/c196387820c9214c5ceaff56d77303c82514b8b1 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/d56e460e19ea8382f813eb489730248ec8d7eb73 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/f006c45a3ea424f8f6c8e4b9283bc245ce2a4d0f · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 03 APR 17:00Z
    hwmon: (nct6775) Fix access to temperature configuration registers
    cvelistv5