CVE-2024-41028

platform/x86: toshiba_acpi: Fix array out-of-bounds access

State: Published
Severity: 7.1 High
Published: Jul 29, 2024
Updated: Aug 5, 2026
Reserved: Jul 12, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

platform/x86: toshiba_acpi: Fix array out-of-bounds access

In order to use toshiba_dmi_quirks[] together with the standard DMI matching functions, it must be terminated by a empty entry.

Since this entry is missing, an array out-of-bounds access occurs every time the quirk list is processed.

Fix this by adding the terminating empty entry.

Scores

CVSS	Score	Vector	Source
3.1	7.1 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	3cb1f40dfdc3b9f5449076c96b4e2523139f5cd0 to before e030aa6c972641cb069086a8c7a0f747653e472aAffected 3cb1f40dfdc3b9f5449076c96b4e2523139f5cd0 to before 639868f1cb87b683cf830353bbee0c4078202313Affected 3cb1f40dfdc3b9f5449076c96b4e2523139f5cd0 to before 0d71da43d6b7916d36cf1953d793da80433c50bfAffected 3cb1f40dfdc3b9f5449076c96b4e2523139f5cd0 to before b6e02c6b0377d4339986e07aeb696c632cd392aaAffected
LinuxLinux	6.1Affected before 6.1Not affected 6.1.100 through 6.1.Not affected 6.6.41 through 6.6.Not affected 6.9.10 through 6.9.*Not affected 6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.