CVE-2024-58069

rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read

State: Published
Severity: 7.8 High
Published: Mar 6, 2025
Updated: Aug 5, 2026
Reserved: Mar 6, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read

The nvmem interface supports variable buffer sizes, while the regmap interface operates with fixed-size storage. If an nvmem client uses a buffer size less than 4 bytes, regmap_read will write out of bounds as it expects the buffer to point at an unsigned int.

Fix this by using an intermediary unsigned int to hold the value.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-787 Out-of-bounds Write

Affected Products

Product	Versions
LinuxLinux	fadfd092ee9138825d8c2a4f95719d2e2e3202b9 to before 21cd59fcb9952eb7505da2bdfc1eb9c619df3ff4Affected fadfd092ee9138825d8c2a4f95719d2e2e3202b9 to before 6f2a8ca9a0a38589f52a7f0fb9425b9ba987ae7cAffected fadfd092ee9138825d8c2a4f95719d2e2e3202b9 to before e5536677da803ed54a29a446515c28dce7d3d574Affected fadfd092ee9138825d8c2a4f95719d2e2e3202b9 to before c72b7a474d3f445bf0c5bcf8ffed332c78eb28a1Affected fadfd092ee9138825d8c2a4f95719d2e2e3202b9 to before 9adefa7b9559d0f21034a5d5ec1b55840c9348b9Affected fadfd092ee9138825d8c2a4f95719d2e2e3202b9 to before e5e06455760f2995b16a176033909347929d1128Affected fadfd092ee9138825d8c2a4f95719d2e2e3202b9 to before 517aedb365f2c94e2d7e0b908ac7127df76203a1Affected fadfd092ee9138825d8c2a4f95719d2e2e3202b9 to before 3ab8c5ed4f84fa20cd16794fe8dc31f633fbc70cAffected
LinuxLinux	5.2Affected before 5.2Not affected 5.4.291 through 5.4.Not affected 5.10.235 through 5.10.Not affected 5.15.179 through 5.15.Not affected 6.1.129 through 6.1.Not affected 6.6.76 through 6.6.Not affected 6.12.13 through 6.12.Not affected 6.13.2 through 6.13.*Not affected 6.14 and laterNot affected

Product

Versions

LinuxLinux

fadfd092ee9138825d8c2a4f95719d2e2e3202b9 to before 21cd59fcb9952eb7505da2bdfc1eb9c619df3ff4Affected
fadfd092ee9138825d8c2a4f95719d2e2e3202b9 to before 6f2a8ca9a0a38589f52a7f0fb9425b9ba987ae7cAffected
fadfd092ee9138825d8c2a4f95719d2e2e3202b9 to before e5536677da803ed54a29a446515c28dce7d3d574Affected
fadfd092ee9138825d8c2a4f95719d2e2e3202b9 to before c72b7a474d3f445bf0c5bcf8ffed332c78eb28a1Affected
fadfd092ee9138825d8c2a4f95719d2e2e3202b9 to before 9adefa7b9559d0f21034a5d5ec1b55840c9348b9Affected
fadfd092ee9138825d8c2a4f95719d2e2e3202b9 to before e5e06455760f2995b16a176033909347929d1128Affected
fadfd092ee9138825d8c2a4f95719d2e2e3202b9 to before 517aedb365f2c94e2d7e0b908ac7127df76203a1Affected
fadfd092ee9138825d8c2a4f95719d2e2e3202b9 to before 3ab8c5ed4f84fa20cd16794fe8dc31f633fbc70cAffected

LinuxLinux

5.2Affected
before 5.2Not affected
5.4.291 through 5.4.*Not affected
5.10.235 through 5.10.*Not affected
5.15.179 through 5.15.*Not affected
6.1.129 through 6.1.*Not affected
6.6.76 through 6.6.*Not affected
6.12.13 through 6.12.*Not affected
6.13.2 through 6.13.*Not affected
6.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.