CVE-2024-26967
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
01/05/2024
Last modified:
23/12/2024
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
clk: qcom: camcc-sc8280xp: fix terminating of frequency table arrays<br />
<br />
The frequency table arrays are supposed to be terminated with an<br />
empty element. Add such entry to the end of the arrays where it<br />
is missing in order to avoid possible out-of-bound access when<br />
the table is traversed by functions like qcom_find_freq() or<br />
qcom_find_freq_floor().<br />
<br />
Only compile tested.
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.8 (including) | 6.8.3 (excluding) |
To consult the complete list of CPE names with products and versions, see this page