Riskcovery

CVE-2024-35992

phy: marvell: a3700-comphy: Fix out of bounds read

State
Published
Severity
Not scored
Published
May 20, 2024
Updated
May 11, 2026
Reserved
May 17, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

phy: marvell: a3700-comphy: Fix out of bounds read

There is an out of bounds read access of 'gbe_phy_init_fix[fix_idx].addr' every iteration after 'fix_idx' reaches 'ARRAY_SIZE(gbe_phy_init_fix)'.

Make sure 'gbe_phy_init[addr]' is used when all elements of 'gbe_phy_init_fix' array are handled.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 934337080c6c59b75db76b180b509f218640ad48 to before 976df695f579bbb2914114b4e9974fe4ed1eb813Affected
  • 934337080c6c59b75db76b180b509f218640ad48 to before 610f175d2e16fb2436ba7974b990563002c20d07Affected
  • 934337080c6c59b75db76b180b509f218640ad48 to before 40406dfbc060503d2e0a9e637e98493c54997b3dAffected
  • 934337080c6c59b75db76b180b509f218640ad48 to before e4308bc22b9d46cf33165c9dfaeebcf29cd56f04Affected
LinuxLinux
  • 5.18Affected
  • before 5.18Not affected
  • 6.1.90 through 6.1.*Not affected
  • 6.6.30 through 6.6.*Not affected
  • 6.8.9 through 6.8.*Not affected
  • 6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.