CVE-2024-57953

rtc: tps6594: Fix integer overflow on 32bit systems

State
Published
Severity
5.5 Medium
Published
Feb 27, 2025
Updated
May 11, 2026
Reserved
Jan 19, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

rtc: tps6594: Fix integer overflow on 32bit systems

The problem is this multiply in tps6594_rtc_set_offset()

tmp = offset * TICKS_PER_HOUR;

The "tmp" variable is an s64 but "offset" is a long in the (-277774)-277774 range. On 32bit systems a long can hold numbers up to approximately two billion. The number of TICKS_PER_HOUR is really large, (32768 * 3600) or roughly a hundred million. When you start multiplying by a hundred million it doesn't take long to overflow the two billion mark.

Probably the safest way to fix this is to change the type of TICKS_PER_HOUR to long long because it's such a large number.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

  • CWE-190 Integer Overflow or Wraparound

Affected Products

ProductVersions
LinuxLinux
  • 9f67c1e63976d3403f0b250b03ffe959c890f9db to before 5127f3cbfc78a7b301b86328247230bec47e0bb3Affected
  • 9f67c1e63976d3403f0b250b03ffe959c890f9db to before 53b0c7b15accb18d15d95c7fe68f61630ebfd1caAffected
  • 9f67c1e63976d3403f0b250b03ffe959c890f9db to before 09c4a610153286cef54d4f0c85398f4e32fc227eAffected
LinuxLinux
  • 6.8Affected
  • before 6.8Not affected
  • 6.12.13 through 6.12.*Not affected
  • 6.13.2 through 6.13.*Not affected
  • 6.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.