CVE-2024-41028
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2024-41028
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-41028.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2024-41028
- Downstream
- Related
- Published
- 2024-07-29T14:31:44Z
- Modified
- 2025-10-21T15:53:29.912294Z
- Summary
- platform/x86: toshiba_acpi: Fix array out-of-bounds access
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
platform/x86: toshiba_acpi: Fix array out-of-bounds access
In order to use toshibadmiquirks[] together with the standard DMI matching functions, it must be terminated by a empty entry.
Since this entry is missing, an array out-of-bounds access occurs every time the quirk list is processed.
Fix this by adding the terminating empty entry.
- References
-
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- https://git.kernel.org/stable/c/0d71da43d6b7916d36cf1953d793da80433c50bf
- https://git.kernel.org/stable/c/639868f1cb87b683cf830353bbee0c4078202313
- https://git.kernel.org/stable/c/b6e02c6b0377d4339986e07aeb696c632cd392aa
- https://git.kernel.org/stable/c/e030aa6c972641cb069086a8c7a0f747653e472a
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced3cb1f40dfdc3b9f5449076c96b4e2523139f5cd0Fixede030aa6c972641cb069086a8c7a0f747653e472a
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced3cb1f40dfdc3b9f5449076c96b4e2523139f5cd0Fixed639868f1cb87b683cf830353bbee0c4078202313
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced3cb1f40dfdc3b9f5449076c96b4e2523139f5cd0Fixed0d71da43d6b7916d36cf1953d793da80433c50bf
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced3cb1f40dfdc3b9f5449076c96b4e2523139f5cd0Fixedb6e02c6b0377d4339986e07aeb696c632cd392aa
Affected versions
v6.*
v6.0
v6.0-rc2
v6.0-rc3
v6.0-rc4
v6.0-rc5
v6.0-rc6
v6.0-rc7
v6.1
v6.1-rc1
v6.1-rc2
v6.1-rc3
v6.1-rc4
v6.1-rc5
v6.1-rc6
v6.1-rc7
v6.1-rc8
v6.1.1
v6.1.10
v6.1.11
v6.1.12
v6.1.13
v6.1.14
v6.1.15
v6.1.16
v6.1.17
v6.1.18
v6.1.19
v6.1.2
v6.1.20
v6.1.21
v6.1.22
v6.1.23
v6.1.24
v6.1.25
v6.1.26
v6.1.27
v6.1.28
v6.1.29
v6.1.3
v6.1.30
v6.1.31
v6.1.32
v6.1.33
v6.1.34
v6.1.35
v6.1.36
v6.1.37
v6.1.38
v6.1.39
v6.1.4
v6.1.40
v6.1.41
v6.1.42
v6.1.43
v6.1.44
v6.1.45
v6.1.46
v6.1.47
v6.1.48
v6.1.49
v6.1.5
v6.1.50
v6.1.51
v6.1.52
v6.1.53
v6.1.54
v6.1.55
v6.1.56
v6.1.57
v6.1.58
v6.1.59
v6.1.6
v6.1.60
v6.1.61
v6.1.62
v6.1.63
v6.1.64
v6.1.65
v6.1.66
v6.1.67
v6.1.68
v6.1.69
v6.1.7
v6.1.70
v6.1.71
v6.1.72
v6.1.73
v6.1.74
v6.1.75
v6.1.76
v6.1.77
v6.1.78
v6.1.79
v6.1.8
v6.1.80
v6.1.81
v6.1.82
v6.1.83
v6.1.84
v6.1.85
v6.1.86
v6.1.87
v6.1.88
v6.1.89
v6.1.9
v6.1.90
v6.1.91
v6.1.92
v6.1.93
v6.1.94
v6.1.95
v6.1.96
v6.1.97
v6.1.98
v6.1.99
v6.10-rc1
v6.2
v6.2-rc1
v6.2-rc2
v6.2-rc3
v6.2-rc4
v6.2-rc5
v6.2-rc6
v6.2-rc7
v6.2-rc8
v6.3
v6.3-rc1
v6.3-rc2
v6.3-rc3
v6.3-rc4
v6.3-rc5
v6.3-rc6
v6.3-rc7
v6.4
v6.4-rc1
v6.4-rc2
v6.4-rc3
v6.4-rc4
v6.4-rc5
v6.4-rc6
v6.4-rc7
v6.5
v6.5-rc1
v6.5-rc2
v6.5-rc3
v6.5-rc4
v6.5-rc5
v6.5-rc6
v6.5-rc7
v6.6
v6.6-rc1
v6.6-rc2
v6.6-rc3
v6.6-rc4
v6.6-rc5
v6.6-rc6
v6.6-rc7
v6.6.1
v6.6.10
v6.6.11
v6.6.12
v6.6.13
v6.6.14
v6.6.15
v6.6.16
v6.6.17
v6.6.18
v6.6.19
v6.6.2
v6.6.20
v6.6.21
v6.6.22
v6.6.23
v6.6.24
v6.6.25
v6.6.26
v6.6.27
v6.6.28
v6.6.29
v6.6.3
v6.6.30
v6.6.31
v6.6.32
v6.6.33
v6.6.34
v6.6.35
v6.6.36
v6.6.37
v6.6.38
v6.6.39
v6.6.4
v6.6.40
v6.6.5
v6.6.6
v6.6.7
v6.6.8
v6.6.9
v6.7
v6.7-rc1
v6.7-rc2
v6.7-rc3
v6.7-rc4
v6.7-rc5
v6.7-rc6
v6.7-rc7
v6.7-rc8
v6.8
v6.8-rc1
v6.8-rc2
v6.8-rc3
v6.8-rc4
v6.8-rc5
v6.8-rc6
v6.8-rc7
v6.9
v6.9-rc1
v6.9-rc2
v6.9-rc3
v6.9-rc4
v6.9-rc5
v6.9-rc6
v6.9-rc7
v6.9.1
v6.9.2
v6.9.3
v6.9.4
v6.9.5
v6.9.6
v6.9.7
v6.9.8
v6.9.9
Database specific
vanir_signatures
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0d71da43d6b7916d36cf1953d793da80433c50bf",
"id": "CVE-2024-41028-25993d44",
"deprecated": false,
"target": {
"file": "drivers/platform/x86/toshiba_acpi.c"
},
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"245713058827384736066903546693420025853",
"222622807998441831199677115871667278071",
"34241411368976995045939358967897505362",
"154097356534219478532282718402292467528"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@639868f1cb87b683cf830353bbee0c4078202313",
"id": "CVE-2024-41028-4c06a7a8",
"deprecated": false,
"target": {
"file": "drivers/platform/x86/toshiba_acpi.c"
},
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"245713058827384736066903546693420025853",
"222622807998441831199677115871667278071",
"34241411368976995045939358967897505362",
"154097356534219478532282718402292467528"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b6e02c6b0377d4339986e07aeb696c632cd392aa",
"id": "CVE-2024-41028-7cc8af9d",
"deprecated": false,
"target": {
"file": "drivers/platform/x86/toshiba_acpi.c"
},
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"245713058827384736066903546693420025853",
"222622807998441831199677115871667278071",
"34241411368976995045939358967897505362",
"154097356534219478532282718402292467528"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e030aa6c972641cb069086a8c7a0f747653e472a",
"id": "CVE-2024-41028-e58c1699",
"deprecated": false,
"target": {
"file": "drivers/platform/x86/toshiba_acpi.c"
},
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"245713058827384736066903546693420025853",
"222622807998441831199677115871667278071",
"34241411368976995045939358967897505362",
"154097356534219478532282718402292467528"
]
}
}
]