CVE-2024-53162

crypto: qat/qat_4xxx - fix off by one in uof_get_name()

State: Published
Severity: 7.1 High
Published: Dec 24, 2024
Updated: May 11, 2026
Reserved: Nov 19, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

crypto: qat/qat_4xxx - fix off by one in uof_get_name()

The fw_objs[] array has "num_objs" elements so the > needs to be >= to prevent an out of bounds read.

Scores

CVSS	Score	Vector	Source
3.1	7.1 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H	CISA-ADP

Weaknesses

CWE-125 Out-of-bounds Read

Affected Products

Product	Versions
LinuxLinux	10484c647af6b1952d1675e83be9cc976cdb6a96 to before 05c9a7a5344425860202a8f3efea4d8ed2d10edbAffected 10484c647af6b1952d1675e83be9cc976cdb6a96 to before e69d2845aaa080960f38761f78fd25aa856620c6Affected 10484c647af6b1952d1675e83be9cc976cdb6a96 to before 700852528fc5295897d6089eea0656d67f9b9d88Affected 10484c647af6b1952d1675e83be9cc976cdb6a96 to before 475b5098043eef6e72751aadeab687992a5b63d1Affected
LinuxLinux	6.5Affected before 6.5Not affected 6.6.64 through 6.6.Not affected 6.11.11 through 6.11.Not affected 6.12.2 through 6.12.*Not affected 6.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.