CVE-2024-26751

Sažetak

In the Linux kernel, the following vulnerability has been resolved: ARM: ep93xx: Add terminator to gpiod_lookup_table Without the terminator, if a con_id is passed to gpio_find() that does not exist in the lookup table the function will not stop looping correctly, and eventually cause an oops.

Reference

https://git.kernel.org/stable/c/6abe0895b63c20de06685c8544b908c7e413efa8
https://git.kernel.org/stable/c/70d92abbe29692a3de8697ae082c60f2d21ab482
https://git.kernel.org/stable/c/786f089086b505372fb3f4f008d57e7845fff0d8
https://git.kernel.org/stable/c/97ba7c1f9c0a2401e644760d857b2386aa895997
https://git.kernel.org/stable/c/999a8bb70da2946336327b4480824d1691cae1fa
https://git.kernel.org/stable/c/9e200a06ae2abb321939693008290af32b33dd6e
https://git.kernel.org/stable/c/eec6cbbfa1e8d685cc245cfd5626d0715a127a48
https://git.kernel.org/stable/c/fdf87a0dc26d0550c60edc911cda42f9afec3557
https://git.kernel.org/stable/c/6abe0895b63c20de06685c8544b908c7e413efa8
https://git.kernel.org/stable/c/70d92abbe29692a3de8697ae082c60f2d21ab482
https://git.kernel.org/stable/c/786f089086b505372fb3f4f008d57e7845fff0d8
https://git.kernel.org/stable/c/97ba7c1f9c0a2401e644760d857b2386aa895997
https://git.kernel.org/stable/c/999a8bb70da2946336327b4480824d1691cae1fa
https://git.kernel.org/stable/c/9e200a06ae2abb321939693008290af32b33dd6e
https://git.kernel.org/stable/c/eec6cbbfa1e8d685cc245cfd5626d0715a127a48
https://git.kernel.org/stable/c/fdf87a0dc26d0550c60edc911cda42f9afec3557
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html

CVSS

Base:	5.5
Impact:	3.6
Exploitability:	1.8

Pristup

Vektor	Složenost	Autentikacija
LOCAL	LOW	LOW

Impact

Povjerljivost	Cjelovitost	Dostupnost
NONE	NONE	HIGH

CVSS vektor

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Zadnje važnije ažuriranje

17-03-2025 - 16:57

Objavljeno

03-04-2024 - 17:15