CVE-2024-56557CWE-120

CVE-2024-56557

High · published December 27, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
15.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

iio: adc: ad7923: Fix buffer overflow for tx_buf and ring_xfer

The AD7923 was updated to support devices with 8 channels, but the size

of tx_buf and ring_xfer was not increased accordingly, leading to a

potential buffer overflow in ad7923_update_scan_mode().

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00252 · 15.7th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2024-12-27T20:15Z
Affected products (3)
ProductVersionsFixed in
linux/linux_kernel≥ 5.6, < 6.1.1206.1.120
linux/linux_kernel≥ 6.2, < 6.6.646.6.64
linux/linux_kernel≥ 6.7, < 6.12.46.12.4
References (6)
EPSS history
Timeline
  • 27 DEC 14:23Z
    iio: adc: ad7923: Fix buffer overflow for tx_buf and ring_xfer
    cvelistv5