CVE-2024-57983: mailbox: th1520: Fix memory corruption due to incorrect array size
First published: Thu Feb 27 2025(Updated: )
In the Linux kernel, the following vulnerability has been resolved: mailbox: th1520: Fix memory corruption due to incorrect array size The functions th1520_mbox_suspend_noirq and th1520_mbox_resume_noirq are intended to save and restore the interrupt mask registers in the MBOX ICU0. However, the array used to store these registers was incorrectly sized, leading to memory corruption when accessing all four registers. This commit corrects the array size to accommodate all four interrupt mask registers, preventing memory corruption during suspend and resume operations.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux Kernel | ||
| Linux Kernel | >=6.13<6.13.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-57983?
CVE-2024-57983 has a high severity rating due to the potential for memory corruption.
How do I fix CVE-2024-57983?
To fix CVE-2024-57983, update your Linux kernel to version 6.13.2 or later.
What systems are affected by CVE-2024-57983?
CVE-2024-57983 affects Linux kernel versions between 6.13 and 6.13.2.
What type of vulnerability is CVE-2024-57983?
CVE-2024-57983 is a memory corruption vulnerability in the Linux kernel.
What components are involved in CVE-2024-57983?
CVE-2024-57983 involves the mailbox functions th1520_mbox_suspend_noirq and th1520_mbox_resume_noirq.
- collector/mitre-cve
- source/MITRE
- agent/first-publish-date
- agent/type
- agent/title
- agent/description
- agent/author
- agent/references
- agent/source
- agent/guess-ai
- agent/software-canonical-lookup
- collector/nvd-api
- source/NVD
- agent/weakness
- agent/last-modified-date
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/remedy
- agent/event
- vendor/linux
- canonical/linux kernel
- version/linux kernel/6.13