CVE-2024-26966

clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays

State: Published
Severity: 7.8 High
Published: May 1, 2024
Updated: Aug 5, 2026
Reserved: Feb 19, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays

The frequency table arrays are supposed to be terminated with an empty element. Add such entry to the end of the arrays where it is missing in order to avoid possible out-of-bound access when the table is traversed by functions like qcom_find_freq() or qcom_find_freq_floor().

Only compile tested.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	2b46cd23a5a2cf0b8d3583338b63409f5e78e7cd to before 5533686e99b04994d7c4877dc0e4282adc9444a2Affected 2b46cd23a5a2cf0b8d3583338b63409f5e78e7cd to before b2dfb216f32627c2f6a8041f2d9d56d102ab87c0Affected 2b46cd23a5a2cf0b8d3583338b63409f5e78e7cd to before a09aecb6cb482de88301c43bf00a6c8726c4d34fAffected 2b46cd23a5a2cf0b8d3583338b63409f5e78e7cd to before 3aedcf3755c74dafc187eb76acb04e3e6348b1a9Affected 2b46cd23a5a2cf0b8d3583338b63409f5e78e7cd to before 185de0b7cdeaad8b89ebd4c8a258ff2f21adba99Affected 2b46cd23a5a2cf0b8d3583338b63409f5e78e7cd to before 9b4c4546dd61950e80ffdca1bf6925f42b665b03Affected 2b46cd23a5a2cf0b8d3583338b63409f5e78e7cd to before 7e5432401536117c316d7f3b21d46b64c1514f38Affected 2b46cd23a5a2cf0b8d3583338b63409f5e78e7cd to before 5638330150db2cc30b53eed04e481062faa3ece8Affected 2b46cd23a5a2cf0b8d3583338b63409f5e78e7cd to before a903cfd38d8dee7e754fb89fd1bebed99e28003dAffected
LinuxLinux	3.17Affected before 3.17Not affected 4.19.312 through 4.19.Not affected 5.4.274 through 5.4.Not affected 5.10.215 through 5.10.Not affected 5.15.154 through 5.15.Not affected 6.1.84 through 6.1.Not affected 6.6.24 through 6.6.Not affected 6.7.12 through 6.7.Not affected 6.8.3 through 6.8.Not affected 6.9 and laterNot affected

Product

Versions

LinuxLinux

2b46cd23a5a2cf0b8d3583338b63409f5e78e7cd to before 5533686e99b04994d7c4877dc0e4282adc9444a2Affected
2b46cd23a5a2cf0b8d3583338b63409f5e78e7cd to before b2dfb216f32627c2f6a8041f2d9d56d102ab87c0Affected
2b46cd23a5a2cf0b8d3583338b63409f5e78e7cd to before a09aecb6cb482de88301c43bf00a6c8726c4d34fAffected
2b46cd23a5a2cf0b8d3583338b63409f5e78e7cd to before 3aedcf3755c74dafc187eb76acb04e3e6348b1a9Affected
2b46cd23a5a2cf0b8d3583338b63409f5e78e7cd to before 185de0b7cdeaad8b89ebd4c8a258ff2f21adba99Affected
2b46cd23a5a2cf0b8d3583338b63409f5e78e7cd to before 9b4c4546dd61950e80ffdca1bf6925f42b665b03Affected
2b46cd23a5a2cf0b8d3583338b63409f5e78e7cd to before 7e5432401536117c316d7f3b21d46b64c1514f38Affected
2b46cd23a5a2cf0b8d3583338b63409f5e78e7cd to before 5638330150db2cc30b53eed04e481062faa3ece8Affected
2b46cd23a5a2cf0b8d3583338b63409f5e78e7cd to before a903cfd38d8dee7e754fb89fd1bebed99e28003dAffected

LinuxLinux

3.17Affected
before 3.17Not affected
4.19.312 through 4.19.*Not affected
5.4.274 through 5.4.*Not affected
5.10.215 through 5.10.*Not affected
5.15.154 through 5.15.*Not affected
6.1.84 through 6.1.*Not affected
6.6.24 through 6.6.*Not affected
6.7.12 through 6.7.*Not affected
6.8.3 through 6.8.*Not affected
6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.