CVE-2024-57792

power: supply: gpio-charger: Fix set charge current limits

State: Published
Severity: 7.3 High
Published: Jan 11, 2025
Updated: Aug 5, 2026
Reserved: Jan 11, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

power: supply: gpio-charger: Fix set charge current limits

Fix set charge current limits for devices which allow to set the lowest charge current limit to be greater zero. If requested charge current limit is below lowest limit, the index equals current_limit_map_size which leads to accessing memory beyond allocated memory.

Scores

CVSS	Score	Vector	Source
3.1	7.3 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	be2919d8355e4651386ad2fb61ddb6efe4533b1b to before b29c7783ac1fe36d639c089cf471ac7a46df05f0Affected be2919d8355e4651386ad2fb61ddb6efe4533b1b to before c3703d9340ca2820e1ac63256f4b423ea8559831Affected be2919d8355e4651386ad2fb61ddb6efe4533b1b to before 6abbbd8286b6f944eecf3c74444c138590135211Affected be2919d8355e4651386ad2fb61ddb6efe4533b1b to before 13eb3cae1d8e23cce96c095abe34da8028c09ac5Affected be2919d8355e4651386ad2fb61ddb6efe4533b1b to before f6279a98db132da0cfff18712a1b06478c32007fAffected be2919d8355e4651386ad2fb61ddb6efe4533b1b to before afc6e39e824ad0e44b2af50a97885caec8d213d1Affected
LinuxLinux	5.10Affected before 5.10Not affected 5.10.233 through 5.10.Not affected 5.15.176 through 5.15.Not affected 6.1.123 through 6.1.Not affected 6.6.69 through 6.6.Not affected 6.12.8 through 6.12.*Not affected 6.13 and laterNot affected

Product

Versions

LinuxLinux

be2919d8355e4651386ad2fb61ddb6efe4533b1b to before b29c7783ac1fe36d639c089cf471ac7a46df05f0Affected
be2919d8355e4651386ad2fb61ddb6efe4533b1b to before c3703d9340ca2820e1ac63256f4b423ea8559831Affected
be2919d8355e4651386ad2fb61ddb6efe4533b1b to before 6abbbd8286b6f944eecf3c74444c138590135211Affected
be2919d8355e4651386ad2fb61ddb6efe4533b1b to before 13eb3cae1d8e23cce96c095abe34da8028c09ac5Affected
be2919d8355e4651386ad2fb61ddb6efe4533b1b to before f6279a98db132da0cfff18712a1b06478c32007fAffected
be2919d8355e4651386ad2fb61ddb6efe4533b1b to before afc6e39e824ad0e44b2af50a97885caec8d213d1Affected

LinuxLinux

5.10Affected
before 5.10Not affected
5.10.233 through 5.10.*Not affected
5.15.176 through 5.15.*Not affected
6.1.123 through 6.1.*Not affected
6.6.69 through 6.6.*Not affected
6.12.8 through 6.12.*Not affected
6.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.