CVE-2024-26971
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2024-26971
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-26971.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2024-26971
- Downstream
- Published
- 2024-05-01T05:19:59.773Z
- Modified
- 2025-11-20T04:04:40.699926Z
- Summary
- clk: qcom: gcc-ipq5018: fix terminating of frequency table arrays
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
clk: qcom: gcc-ipq5018: fix terminating of frequency table arrays
The frequency table arrays are supposed to be terminated with an empty element. Add such entry to the end of the arrays where it is missing in order to avoid possible out-of-bound access when the table is traversed by functions like qcomfindfreq() or qcomfindfreq_floor().
- References
-
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- https://git.kernel.org/stable/c/50c3acd460551cdf9d8ac6fe0c04f2de0e8e0872
- https://git.kernel.org/stable/c/90ad946fff70f312b8d23226afc38c13ddd88c4b
- https://git.kernel.org/stable/c/b0cf3d200e8a72b6d28e6e088c062b4a98cb5eaf
- https://git.kernel.org/stable/c/c8f4bef0667947b826848db1c45a645f751357c1
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducede3fdbef1bab8e372981c8cc4d8febbaa76c490b0Fixedb0cf3d200e8a72b6d28e6e088c062b4a98cb5eaf
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducede3fdbef1bab8e372981c8cc4d8febbaa76c490b0Fixedc8f4bef0667947b826848db1c45a645f751357c1
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducede3fdbef1bab8e372981c8cc4d8febbaa76c490b0Fixed50c3acd460551cdf9d8ac6fe0c04f2de0e8e0872
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducede3fdbef1bab8e372981c8cc4d8febbaa76c490b0Fixed90ad946fff70f312b8d23226afc38c13ddd88c4b
Affected versions
v6.*
v6.5
v6.5-rc2
v6.5-rc3
v6.5-rc4
v6.5-rc5
v6.5-rc6
v6.5-rc7
v6.6
v6.6-rc1
v6.6-rc2
v6.6-rc3
v6.6-rc4
v6.6-rc5
v6.6-rc6
v6.6-rc7
v6.6.1
v6.6.10
v6.6.11
v6.6.12
v6.6.13
v6.6.14
v6.6.15
v6.6.16
v6.6.17
v6.6.18
v6.6.19
v6.6.2
v6.6.20
v6.6.21
v6.6.22
v6.6.23
v6.6.3
v6.6.4
v6.6.5
v6.6.6
v6.6.7
v6.6.8
v6.6.9
v6.7
v6.7-rc1
v6.7-rc2
v6.7-rc3
v6.7-rc4
v6.7-rc5
v6.7-rc6
v6.7-rc7
v6.7-rc8
v6.7.1
v6.7.10
v6.7.11
v6.7.2
v6.7.3
v6.7.4
v6.7.5
v6.7.6
v6.7.7
v6.7.8
v6.7.9
v6.8
v6.8-rc1
v6.8-rc2
v6.8-rc3
v6.8-rc4
v6.8-rc5
v6.8-rc6
v6.8-rc7
v6.8.1
v6.8.2
Database specific
vanir_signatures
[
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "drivers/clk/qcom/gcc-ipq5018.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@90ad946fff70f312b8d23226afc38c13ddd88c4b",
"digest": {
"line_hashes": [
"130337725955548167269406892465968600474",
"164399965210262721600094928071759988422",
"97989981927090835065882435894461361684",
"55649101666137460211506646613450893024",
"102528253637787098626744414464023272902",
"259787772868962595848216223534330572557",
"6961913096029209517898275896374021432",
"235540092728538695742622608102047508997",
"120084722732984199270972373239216546197",
"315727840849556457078037368201410892279",
"256987630580258665601813180204299162306",
"138522532352641712878069206944705408127"
],
"threshold": 0.9
},
"id": "CVE-2024-26971-88028953"
},
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "drivers/clk/qcom/gcc-ipq5018.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b0cf3d200e8a72b6d28e6e088c062b4a98cb5eaf",
"digest": {
"line_hashes": [
"130337725955548167269406892465968600474",
"164399965210262721600094928071759988422",
"97989981927090835065882435894461361684",
"55649101666137460211506646613450893024",
"102528253637787098626744414464023272902",
"259787772868962595848216223534330572557",
"6961913096029209517898275896374021432",
"235540092728538695742622608102047508997",
"120084722732984199270972373239216546197",
"315727840849556457078037368201410892279",
"256987630580258665601813180204299162306",
"138522532352641712878069206944705408127"
],
"threshold": 0.9
},
"id": "CVE-2024-26971-cff22a0a"
},
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "drivers/clk/qcom/gcc-ipq5018.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c8f4bef0667947b826848db1c45a645f751357c1",
"digest": {
"line_hashes": [
"130337725955548167269406892465968600474",
"164399965210262721600094928071759988422",
"97989981927090835065882435894461361684",
"55649101666137460211506646613450893024",
"102528253637787098626744414464023272902",
"259787772868962595848216223534330572557",
"6961913096029209517898275896374021432",
"235540092728538695742622608102047508997",
"120084722732984199270972373239216546197",
"315727840849556457078037368201410892279",
"256987630580258665601813180204299162306",
"138522532352641712878069206944705408127"
],
"threshold": 0.9
},
"id": "CVE-2024-26971-d9518e29"
},
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "drivers/clk/qcom/gcc-ipq5018.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@50c3acd460551cdf9d8ac6fe0c04f2de0e8e0872",
"digest": {
"line_hashes": [
"130337725955548167269406892465968600474",
"164399965210262721600094928071759988422",
"97989981927090835065882435894461361684",
"55649101666137460211506646613450893024",
"102528253637787098626744414464023272902",
"259787772868962595848216223534330572557",
"6961913096029209517898275896374021432",
"235540092728538695742622608102047508997",
"120084722732984199270972373239216546197",
"315727840849556457078037368201410892279",
"256987630580258665601813180204299162306",
"138522532352641712878069206944705408127"
],
"threshold": 0.9
},
"id": "CVE-2024-26971-f5ac9675"
}
]