CVE-2024-47686

ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()

State: Published
Severity: Not scored
Published: Oct 21, 2024
Updated: May 11, 2026
Reserved: Sep 30, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()

The psc->div[] array has psc->num_div elements. These values come from when we call clk_hw_register_div(). It's adc_divisors and ARRAY_SIZE(adc_divisors)) and so on. So this condition needs to be >= instead of > to prevent an out of bounds read.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	9645ccc7bd7a16cd73c3be9dee70cd702b03be37 to before 7a5bd2fb92388c51d267f6ce57c40f1cca8af1e0Affected 9645ccc7bd7a16cd73c3be9dee70cd702b03be37 to before 66e78ade976dbd9bea09166aa8d66afc0963cde4Affected 9645ccc7bd7a16cd73c3be9dee70cd702b03be37 to before 27f493e141823db052586010c1532b70b164507cAffected 9645ccc7bd7a16cd73c3be9dee70cd702b03be37 to before ae59eaf36a1ad396e9f657ec9b8b52da6206ed5fAffected 9645ccc7bd7a16cd73c3be9dee70cd702b03be37 to before c7f06284a6427475e3df742215535ec3f6cd9662Affected
LinuxLinux	5.16Affected before 5.16Not affected 6.1.113 through 6.1.Not affected 6.6.54 through 6.6.Not affected 6.10.13 through 6.10.Not affected 6.11.2 through 6.11.Not affected 6.12 and laterNot affected

Product

Versions

LinuxLinux

9645ccc7bd7a16cd73c3be9dee70cd702b03be37 to before 7a5bd2fb92388c51d267f6ce57c40f1cca8af1e0Affected
9645ccc7bd7a16cd73c3be9dee70cd702b03be37 to before 66e78ade976dbd9bea09166aa8d66afc0963cde4Affected
9645ccc7bd7a16cd73c3be9dee70cd702b03be37 to before 27f493e141823db052586010c1532b70b164507cAffected
9645ccc7bd7a16cd73c3be9dee70cd702b03be37 to before ae59eaf36a1ad396e9f657ec9b8b52da6206ed5fAffected
9645ccc7bd7a16cd73c3be9dee70cd702b03be37 to before c7f06284a6427475e3df742215535ec3f6cd9662Affected

LinuxLinux

5.16Affected
before 5.16Not affected
6.1.113 through 6.1.*Not affected
6.6.54 through 6.6.*Not affected
6.10.13 through 6.10.*Not affected
6.11.2 through 6.11.*Not affected
6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.