CVE-2024-53162: crypto: qat/qat_4xxx - fix off by one in uof_get_name()
In the Linux kernel, the following vulnerability has been resolved:
crypto: qat/qat4xxx - fix off by one in uofgetname()
The fwobjs[] array has "numobjs" elements so the > needs to be >= to prevent an out of bounds read.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-53162?
The severity of CVE-2024-53162 is classified as moderate due to potential out-of-bounds reads.
How do I fix CVE-2024-53162?
To fix CVE-2024-53162, upgrade to the patched versions of the Linux kernel: 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.128-1, 6.12.12-1, or 6.12.16-1.
What are the affected versions for CVE-2024-53162?
The affected versions for CVE-2024-53162 include various builds of the Linux kernel prior to the fixed versions.
What type of vulnerability is CVE-2024-53162?
CVE-2024-53162 is an out-of-bounds read vulnerability within the Linux kernel crypto subsystem.
Is CVE-2024-53162 specific to any operating system distributions?
Yes, CVE-2024-53162 specifically affects Linux distributions using the mentioned versions of the Linux kernel.