CVE-2024-47686: ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
In the Linux kernel, the following vulnerability has been resolved:
ep93xx: clock: Fix off by one in ep93xxdivrecalcrate()
The psc->div[] array has psc->numdiv elements. These values come from when we call clkhwregisterdiv(). It's adcdivisors and ARRAYSIZE(adcdivisors)) and so on. So this condition needs to be >= instead of > to prevent an out of bounds read.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-47686?
CVE-2024-47686 has been classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2024-47686?
To fix CVE-2024-47686, update your Linux kernel to a version that includes the patch.
Which Linux kernel versions are affected by CVE-2024-47686?
CVE-2024-47686 affects Linux kernel versions between 5.16 and 6.11.2, excluding the patched versions.
What is the impact of CVE-2024-47686?
The impact of CVE-2024-47686 involves a potential denial of service or instability caused by the off-by-one error.
Is CVE-2024-47686 exploitable remotely?
CVE-2024-47686 is generally not considered remotely exploitable as it requires local access to the affected system.