CVE-2024-53163: crypto: qat/qat_420xx - fix off by one in uof_get_name()
In the Linux kernel, the following vulnerability has been resolved:
crypto: qat/qat420xx - fix off by one in uofgetname()
This is called from uofgetname420xx() where "numobjs" is the ARRAYSIZE() of fwobjs[]. The > needs to be >= to prevent an out of bounds access.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-53163?
The severity of CVE-2024-53163 is categorized as a medium severity vulnerability.
How do I fix CVE-2024-53163?
To fix CVE-2024-53163, update the Linux Kernel to the latest version that includes the patch for this vulnerability.
What systems are affected by CVE-2024-53163?
CVE-2024-53163 affects the Linux Kernel, specifically in the crypto subsystem related to the QAT driver.
What type of vulnerability is CVE-2024-53163?
CVE-2024-53163 is classified as an off-by-one error that can lead to out-of-bounds access.
Can CVE-2024-53163 be exploited remotely?
CVE-2024-53163 requires local access to exploit, making remote exploitation unlikely.