CVE-2024-57792

CVE-2024-57792

High · published January 11, 2025

CVSS v3.1
7.3
EPSS
0%
Percentile
16.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

power: supply: gpio-charger: Fix set charge current limits

Fix set charge current limits for devices which allow to set the lowest

charge current limit to be greater zero. If requested charge current limit

is below lowest limit, the index equals current_limit_map_size which leads

to accessing memory beyond allocated memory.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00261 · 16.9th percentile
Published
2025-01-11T18:15Z
Affected products (9)
ProductVersionsFixed in
linux/linux_kernel≥ 5.10, < 5.10.2335.10.233
linux/linux_kernel≥ 5.11, < 5.15.1765.15.176
linux/linux_kernel≥ 5.16, < 6.1.1236.1.123
linux/linux_kernel≥ 6.2, < 6.6.696.6.69
linux/linux_kernel≥ 6.7, < 6.12.86.12.8
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (8)
EPSS history
Timeline
  • 11 JAN 12:39Z
    power: supply: gpio-charger: Fix set charge current limits
    cvelistv5