CVE-2024-35992: phy: marvell: a3700-comphy: Fix out of bounds read
In the Linux kernel, the following vulnerability has been resolved:
phy: marvell: a3700-comphy: Fix out of bounds read
There is an out of bounds read access of 'gbephyinitfix[fixidx].addr' every iteration after 'fixidx' reaches 'ARRAYSIZE(gbephyinitfix)'.
Make sure 'gbephyinit[addr]' is used when all elements of 'gbephyinitfix' array are handled.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.27-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-35992?
CVE-2024-35992 has a severity rating that could lead to potential security risks due to out of bounds read access.
How do I fix CVE-2024-35992?
To fix CVE-2024-35992, update the Linux kernel to versions 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.119-1, or 6.12.11-1.
Which versions of the Linux kernel are affected by CVE-2024-35992?
CVE-2024-35992 affects Linux kernel versions between 5.18 and 6.1.90, as well as those between 6.2 and 6.6.30, and between 6.7 and 6.8.9.
What kind of impact can CVE-2024-35992 have on systems?
CVE-2024-35992 can cause potential instability or security flaws due to unauthorized access to memory during the out of bounds read.
Who is responsible for addressing CVE-2024-35992?
The maintainers of the Linux kernel are responsible for addressing CVE-2024-35992 and providing updates to remediate the vulnerability.