CVE-2024-56684: mailbox: mtk-cmdq: fix wrong use of sizeof in cmdq_get_clocks()
In the Linux kernel, the following vulnerability has been resolved:
mailbox: mtk-cmdq: fix wrong use of sizeof in cmdqgetclocks()
It should be size of the struct clkbulkdata, not data pointer pass to devmkcalloc().
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.22-1Fixed in 6.12.25-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-56684?
CVE-2024-56684 is classified with a moderate severity due to its impact on the Linux kernel's functionality.
How do I fix CVE-2024-56684?
To mitigate CVE-2024-56684, you should update your Linux kernel to one of the fixed versions listed in the vulnerability details.
What software versions are affected by CVE-2024-56684?
CVE-2024-56684 affects specific versions of the Linux kernel, including versions prior to 5.10.223-1 and 6.12.15-1.
Is there a patch available for CVE-2024-56684?
Yes, there is a patch available, and you can resolve CVE-2024-56684 by updating to the recommended versions of the Linux kernel.
What is the impact of CVE-2024-56684?
The impact of CVE-2024-56684 includes potential incorrect memory allocation, which can lead to instability or unpredictable behavior in systems using affected Linux kernel versions.