CVE-2024-35992: phy: marvell: a3700-comphy: Fix out of bounds read
In the Linux kernel, the following vulnerability has been resolved:
phy: marvell: a3700-comphy: Fix out of bounds read
There is an out of bounds read access of 'gbephyinitfix[fixidx].addr' every iteration after 'fixidx' reaches 'ARRAYSIZE(gbephyinitfix)'.
Make sure 'gbephyinit[addr]' is used when all elements of 'gbephyinitfix' array are handled.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-35992?
CVE-2024-35992 has a severity rating that could lead to potential security risks due to out of bounds read access.
How do I fix CVE-2024-35992?
To fix CVE-2024-35992, update the Linux kernel to versions 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.119-1, or 6.12.11-1.
Which versions of the Linux kernel are affected by CVE-2024-35992?
CVE-2024-35992 affects Linux kernel versions between 5.18 and 6.1.90, as well as those between 6.2 and 6.6.30, and between 6.7 and 6.8.9.
What kind of impact can CVE-2024-35992 have on systems?
CVE-2024-35992 can cause potential instability or security flaws due to unauthorized access to memory during the out of bounds read.
Who is responsible for addressing CVE-2024-35992?
The maintainers of the Linux kernel are responsible for addressing CVE-2024-35992 and providing updates to remediate the vulnerability.