Vulnerability Details : CVE-2024-26702
In the Linux kernel, the following vulnerability has been resolved:
iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
Recently, we encounter kernel crash in function rm3100_common_probe
caused by out of bound access of array rm3100_samp_rates (because of
underlying hardware failures). Add boundary check to prevent out of
bound access.
Products affected by CVE-2024-26702
- cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:6.8:rc4:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2024-26702
0.01%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2024-26702
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
5.5
|
MEDIUM | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
1.8
|
3.6
|
134c704f-9b21-4f2e-91b3-4a467353bcc0 | 2024-11-05 |
CWE ids for CVE-2024-26702
-
The product reads data past the end, or before the beginning, of the intended buffer.Assigned by: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)
References for CVE-2024-26702
-
https://git.kernel.org/stable/c/57d05dbbcd0b3dc0c252103b43012eef5d6430d1
iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC - kernel/git/stable/linux.git - Linux kernel stable treePatch
-
https://git.kernel.org/stable/c/36a49290d7e6d554020057a409747a092b1d3b56
iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC - kernel/git/stable/linux.git - Linux kernel stable treePatch
-
https://git.kernel.org/stable/c/792595bab4925aa06532a14dd256db523eb4fa5e
iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC - kernel/git/stable/linux.git - Linux kernel stable treePatch
-
https://git.kernel.org/stable/c/176256ff8abff29335ecff905a09fb49e8dcf513
iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC - kernel/git/stable/linux.git - Linux kernel stable treePatch
-
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html
[SECURITY] [DLA 3842-1] linux-5.10 security updateMailing List;Third Party Advisory
-
https://git.kernel.org/stable/c/7200170e88e3ec54d9e9c63f07514c3cead11481
iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC - kernel/git/stable/linux.git - Linux kernel stable treePatch
-
https://git.kernel.org/stable/c/1d8c67e94e9e977603473a543d4f322cf2c4aa01
iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC - kernel/git/stable/linux.git - Linux kernel stable treePatch
-
https://git.kernel.org/stable/c/8d5838a473e8e6d812257c69745f5920e4924a60
iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC - kernel/git/stable/linux.git - Linux kernel stable treePatch
Jump to