CVE-2024-57998CWE-125

CVE-2024-57998

High · published February 27, 2025

CVSS v3.1
7.3
EPSS
0%
Percentile
14.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

OPP: add index check to assert to avoid buffer overflow in _read_freq()

Pass the freq index to the assert function to make sure

we do not read a freq out of the opp->rates[] table when called

from the indexed variants:

dev_pm_opp_find_freq_exact_indexed() or

dev_pm_opp_find_freq_ceil/floor_indexed().

Add a secondary parameter to the assert function, unused

for assert_single_clk() then add assert_clk_index() which

will check for the clock index when called from the _indexed()

find functions.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00241 · 14.3th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2025-02-27T07:15Z
Affected products (3)
ProductVersionsFixed in
linux/linux_kernel≥ 6.6, < 6.6.766.6.76
linux/linux_kernel≥ 6.7, < 6.12.136.12.13
linux/linux_kernel≥ 6.13, < 6.13.26.13.2
References (6)
EPSS history
Timeline
  • 27 FEB 02:07Z
    OPP: add index check to assert to avoid buffer overflow in _read_freq()
    cvelistv5