CVE-2024-26702: iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
In the Linux kernel, the following vulnerability has been resolved:
iio: magnetometer: rm3100: add boundary check for the value read from RM3100REGTMRC
Recently, we encounter kernel crash in function rm3100commonprobe caused by out of bound access of array rm3100samprates (because of underlying hardware failures). Add boundary check to prevent out of bound access.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.82-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.7.7-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1 - Compensating control
In the Linux kernel IIO magnetometer rm3100 driver, add a boundary check for the value read from RM3100_REG_TMRC before using it to index the rm3100_samp_rates array.
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26702?
CVE-2024-26702 has been classified as a medium severity vulnerability due to potential kernel crash risks.
How do I fix CVE-2024-26702?
To fix CVE-2024-26702, update to a patched version of the Linux kernel, such as 5.10.223-1 or later versions.
What systems are affected by CVE-2024-26702?
CVE-2024-26702 affects specific Debian Linux kernel versions including 5.10.223-1, 6.1.123-1, and 6.12.11-1.
When was CVE-2024-26702 publicly disclosed?
CVE-2024-26702 was publicly disclosed in early 2024 as part of the Linux kernel updates.
What are the potential impacts of CVE-2024-26702?
The potential impacts of CVE-2024-26702 include kernel crashes leading to system instability and loss of data.