← CVE Intelligence

CVE-2024-47686

ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate() PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate() The psc->div[] array has psc->num_div elements. These values come from when we call clk_hw_register_div(). It's adc_divisors and ARRAY_SIZE(adc_divisors)) and so on. So this condition needs to be >= instead of > to prevent an out of bounds read.

Affected (CNA)

Vendor / productVersions
Linux / Linuxaffected 9645ccc7bd7a16cd73c3be9dee70cd702b03be37 before 7a5bd2fb92388c51d267f6ce57c40f1cca8af1e0; affected 9645ccc7bd7a16cd73c3be9dee70cd702b03be37 before 66e78ade976dbd9bea09166aa8d66afc0963cde4; affected 9645ccc7bd7a16cd73c3be9dee70cd702b03be37 before 27f493e141823db052586010c1532b70b164507c; affected 9645ccc7bd7a16cd73c3be9dee70cd702b03be37 before ae59eaf36a1ad396e9f657ec9b8b52da6206ed5f; affected 9645ccc7bd7a16cd73c3be9dee70cd702b03be37 before c7f06284a6427475e3df742215535ec3f6cd9662
Linux / Linuxaffected 5.16; unaffected 0 before 5.16; unaffected 6.1.113 through 6.1.*; unaffected 6.6.54 through 6.6.*; unaffected 6.10.13 through 6.10.*; unaffected 6.11.2 through 6.11.*; unaffected 6.12 through *

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.