CVE-2024-57953: rtc: tps6594: Fix integer overflow on 32bit systems
In the Linux kernel, the following vulnerability has been resolved:
rtc: tps6594: Fix integer overflow on 32bit systems
The problem is this multiply in tps6594rtcsetoffset()
tmp = offset TICKSPERHOUR;
The "tmp" variable is an s64 but "offset" is a long in the (-277774)-277774 range. On 32bit systems a long can hold numbers up to approximately two billion. The number of TICKSPERHOUR is really large, (32768 3600) or roughly a hundred million. When you start multiplying by a hundred million it doesn't take long to overflow the two billion mark.
Probably the safest way to fix this is to change the type of TICKSPERHOUR to long long because it's such a large number.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.12.13-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-57953?
CVE-2024-57953 has been classified as a medium severity vulnerability due to the potential for integer overflow on 32-bit systems.
How do I fix CVE-2024-57953?
To fix CVE-2024-57953, update your Linux kernel to version 6.12.14 or later, or 6.13.3 or later.
What systems are affected by CVE-2024-57953?
CVE-2024-57953 affects Linux kernel versions between 6.8 and 6.12.13 and between 6.13 and 6.13.2.
What is the impact of CVE-2024-57953?
The impact of CVE-2024-57953 could allow an attacker to exploit an integer overflow, potentially leading to unexpected behavior or system crashes.
Who discovered CVE-2024-57953?
CVE-2024-57953 was discovered and reported by the maintainers of the Linux kernel.