CVE-2024-57998

OPP: add index check to assert to avoid buffer overflow in _read_freq()

State
Published
Severity
7.3 High
Published
Feb 27, 2025
Updated
Aug 5, 2026
Reserved
Feb 27, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

OPP: add index check to assert to avoid buffer overflow in _read_freq()

Pass the freq index to the assert function to make sure we do not read a freq out of the opp->rates[] table when called from the indexed variants: dev_pm_opp_find_freq_exact_indexed() or dev_pm_opp_find_freq_ceil/floor_indexed().

Add a secondary parameter to the assert function, unused for assert_single_clk() then add assert_clk_index() which will check for the clock index when called from the _indexed() find functions.

Scores

CVSSScoreVectorSource
3.17.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 92fcb46659d5dbfdad0422a503e289085990a5d0 to before 774dd6f0f0a61c9c3848e025d7d9eeed1a7ca4cdAffected
  • 142e17c1c2b48e3fb4f024e62ab6dee18f268694 to before eb6ffa0192ba83ece1a318b956265519c5c7dcecAffected
  • 142e17c1c2b48e3fb4f024e62ab6dee18f268694 to before 7d68c20638e50d5eb4576492a7958328ae445248Affected
  • 142e17c1c2b48e3fb4f024e62ab6dee18f268694 to before da2a6acc73933b7812c94794726e438cde39e037Affected
  • 142e17c1c2b48e3fb4f024e62ab6dee18f268694 to before d659bc68ed489022ea33342cfbda2911a81e7a0dAffected
LinuxLinux
  • 6.6Affected
  • before 6.6Not affected
  • 6.6.76 through 6.6.*Not affected
  • 6.12.13 through 6.12.*Not affected
  • 6.13.2 through 6.13.*Not affected
  • 6.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.