First published: Mon Oct 21 2024(Updated: )
In the Linux kernel, the following vulnerability has been resolved: ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate() The psc->div[] array has psc->num_div elements. These values come from when we call clk_hw_register_div(). It's adc_divisors and ARRAY_SIZE(adc_divisors)) and so on. So this condition needs to be >= instead of > to prevent an out of bounds read.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Affected Software | Affected Version | How to fix |
---|---|---|
Linux Kernel | >=5.16<6.1.113 | |
Linux Kernel | >=6.2<6.6.54 | |
Linux Kernel | >=6.7<6.10.13 | |
Linux Kernel | >=6.11<6.11.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2024-47686 has been classified as a medium severity vulnerability in the Linux kernel.
To fix CVE-2024-47686, update your Linux kernel to a version that includes the patch.
CVE-2024-47686 affects Linux kernel versions between 5.16 and 6.11.2, excluding the patched versions.
The impact of CVE-2024-47686 involves a potential denial of service or instability caused by the off-by-one error.
CVE-2024-47686 is generally not considered remotely exploitable as it requires local access to the affected system.