Review reviewHigh

CVE-2024-53192

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: clk: clk-loongson2: Fix potential buffer overflow in flexible-array member access Flexible-array member `hws` in `struct clk_hw_onecell_data` is annotated with the `counted_by()` attribute. This means that when memory is allocated for this array, the _counter_, which in this case is member `num` in the flexible structure, should be set to the maximum number of elements the flexible array can contain, or fewer. In this case, the total number of elements for the flexible array is determined by variable `clks_num` when allocat...

CVSS: 7.8
EPSS: -
CISA KEV: Not listed
Published: 2024.12.27

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability-

Technical severityCVSS 7.8

Vulnerability overview

Affected product and versions

Product: Linux Linux, linux kernel
Affected versions: >= 9796ec0bd04bb0e70487127d44949ca0554df5d3 < b96fc194984d0c82de1ca2b4166b35b1298b216c, >= 9796ec0bd04bb0e70487127d44949ca0554df5d3 < 1bf8877150128c3abd9d233886a05f6966fbf0c7, >= 9796ec0bd04bb0e70487127d44949ca0554df5d3 < 02fb4f0084331ef72c28d0c70fcb15d1bea369ec, >= 6.10, >= 6.10 < 6.11.11, >= 6.12 < 6.12.2
Fixed versions: 6.11.11, 6.12.2

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that Linux Linux, linux kernel and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE: CWE-120