CVE-2024-53158

soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()

State: Published
Severity: 5.5 Medium
Published: Dec 24, 2024
Updated: May 11, 2026
Reserved: Nov 19, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()

This loop is supposed to break if the frequency returned from clk_round_rate() is the same as on the previous iteration. However, that check doesn't make sense on the first iteration through the loop. It leads to reading before the start of these->clk_perf_tbl[] array.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	eddac5af06546d2e7a0730e3dc02dde3dc91098a to before 37cdd4f0c266560b7b924c42361eeae3dc5f0c3eAffected eddac5af06546d2e7a0730e3dc02dde3dc91098a to before 7a3465b79ef0539aa10b310ac3cc35e0ae25b79eAffected eddac5af06546d2e7a0730e3dc02dde3dc91098a to before 748557ca7dc94695a6e209eb68fce365da9a3bb3Affected eddac5af06546d2e7a0730e3dc02dde3dc91098a to before f4b7bf5a50f1fa25560f0b66a13563465542861bAffected eddac5af06546d2e7a0730e3dc02dde3dc91098a to before b0a9c6ccaf88c4701787f61ecd2ec0eb014a0677Affected eddac5af06546d2e7a0730e3dc02dde3dc91098a to before c24e019ca12d9ec814af04b30a64dd7173fb20feAffected eddac5af06546d2e7a0730e3dc02dde3dc91098a to before 56eda41dcce0ec4d3418b4f85037bdea181486ccAffected eddac5af06546d2e7a0730e3dc02dde3dc91098a to before 351bb7f9ecb9d1f09bd7767491a2b8d07f4f1ea4Affected eddac5af06546d2e7a0730e3dc02dde3dc91098a to before 78261cb08f06c93d362cab5c5034bf5899bc7552Affected
LinuxLinux	4.18Affected before 4.18Not affected 4.19.325 through 4.19.Not affected 5.4.287 through 5.4.Not affected 5.10.231 through 5.10.Not affected 5.15.174 through 5.15.Not affected 6.1.120 through 6.1.Not affected 6.6.64 through 6.6.Not affected 6.11.11 through 6.11.Not affected 6.12.2 through 6.12.Not affected 6.13 and laterNot affected

Product

Versions

LinuxLinux

eddac5af06546d2e7a0730e3dc02dde3dc91098a to before 37cdd4f0c266560b7b924c42361eeae3dc5f0c3eAffected
eddac5af06546d2e7a0730e3dc02dde3dc91098a to before 7a3465b79ef0539aa10b310ac3cc35e0ae25b79eAffected
eddac5af06546d2e7a0730e3dc02dde3dc91098a to before 748557ca7dc94695a6e209eb68fce365da9a3bb3Affected
eddac5af06546d2e7a0730e3dc02dde3dc91098a to before f4b7bf5a50f1fa25560f0b66a13563465542861bAffected
eddac5af06546d2e7a0730e3dc02dde3dc91098a to before b0a9c6ccaf88c4701787f61ecd2ec0eb014a0677Affected
eddac5af06546d2e7a0730e3dc02dde3dc91098a to before c24e019ca12d9ec814af04b30a64dd7173fb20feAffected
eddac5af06546d2e7a0730e3dc02dde3dc91098a to before 56eda41dcce0ec4d3418b4f85037bdea181486ccAffected
eddac5af06546d2e7a0730e3dc02dde3dc91098a to before 351bb7f9ecb9d1f09bd7767491a2b8d07f4f1ea4Affected
eddac5af06546d2e7a0730e3dc02dde3dc91098a to before 78261cb08f06c93d362cab5c5034bf5899bc7552Affected

LinuxLinux

4.18Affected
before 4.18Not affected
4.19.325 through 4.19.*Not affected
5.4.287 through 5.4.*Not affected
5.10.231 through 5.10.*Not affected
5.15.174 through 5.15.*Not affected
6.1.120 through 6.1.*Not affected
6.6.64 through 6.6.*Not affected
6.11.11 through 6.11.*Not affected
6.12.2 through 6.12.*Not affected
6.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.