SECUFOCUSNOW
Home›CVE index›CVE-2024-57998
Review reviewHigh

CVE-2024-57998

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: OPP: add index check to assert to avoid buffer overflow in _read_freq() Pass the freq index to the assert function to make sure we do not read a freq out of the opp->rates[] table when called from the indexed variants: dev_pm_opp_find_freq_exact_indexed() or dev_pm_opp_find_freq_ceil/floor_indexed(). Add a secondary parameter to the assert function, unused for assert_single_clk() then add assert_clk_index() which will check for the clock index when called from the _indexed() find functions.

CVSS
7.8
EPSS
-
- percentile
CISA KEV
Not listed
Published
2025.02.27
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability-
Technical severityCVSS 7.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: OPP: add index check to assert to avoid buffer overflow in _read_freq() Pass the freq index to the assert function to make sure we do not read a freq out of the opp->rates[] table when called from the indexed variants: dev_pm_opp_find_freq_exact_indexed() or dev_pm_opp_find_freq_ceil/floor_indexed(). Add a secondary parameter to the assert function, unused for assert_single_clk() then add assert_clk_index() which will check for the clock index when called from the _indexed() find functions.

Affected product and versions

Product
Linux Linux, linux kernel
Affected versions
>= 92fcb46659d5dbfdad0422a503e289085990a5d0 < 774dd6f0f0a61c9c3848e025d7d9eeed1a7ca4cd, >= 142e17c1c2b48e3fb4f024e62ab6dee18f268694 < eb6ffa0192ba83ece1a318b956265519c5c7dcec, >= 142e17c1c2b48e3fb4f024e62ab6dee18f268694 < 7d68c20638e50d5eb4576492a7958328ae445248, >= 142e17c1c2b48e3fb4f024e62ab6dee18f268694 < da2a6acc73933b7812c94794726e438cde39e037, >= 142e17c1c2b48e3fb4f024e62ab6dee18f268694 < d659bc68ed489022ea33342cfbda2911a81e7a0d, >= 6.6, >= 6.6 < 6.6.76, >= 6.7 < 6.12.13, >= 6.13 < 6.13.2
Fixed versions
6.6.76, 6.12.13, 6.13.2

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux Linux, linux kernel and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
CWE-125