In the Linux kernel, the following vulnerability has been resolved:
ep93xx: clock: Fix off by one in ep93xxdivrecalc_rate()
The psc->div[] array has psc->numdiv elements. These values come from when we call clkhwregisterdiv(). It's adcdivisors and ARRAYSIZE(adc_divisors)) and so on. So this condition needs to be >= instead of > to prevent an out of bounds read.
{ "vanir_signatures": [ { "id": "CVE-2024-47686-6089f7f4", "signature_type": "Function", "target": { "file": "arch/arm/mach-ep93xx/clock.c", "function": "ep93xx_div_recalc_rate" }, "deprecated": false, "digest": { "length": 288.0, "function_hash": "339653333450055823681005327872389253551" }, "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ae59eaf36a1ad396e9f657ec9b8b52da6206ed5f" }, { "id": "CVE-2024-47686-b611e128", "signature_type": "Line", "target": { "file": "arch/arm/mach-ep93xx/clock.c" }, "deprecated": false, "digest": { "line_hashes": [ "274965332793346302206219843738415457267", "10178450145975424798166629457948812078", "139315998919994668451887358384779979776", "121509935056704625071498545300677619757" ], "threshold": 0.9 }, "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@27f493e141823db052586010c1532b70b164507c" }, { "id": "CVE-2024-47686-c4b32be6", "signature_type": "Line", "target": { "file": "arch/arm/mach-ep93xx/clock.c" }, "deprecated": false, "digest": { "line_hashes": [ "274965332793346302206219843738415457267", "10178450145975424798166629457948812078", "139315998919994668451887358384779979776", "121509935056704625071498545300677619757" ], "threshold": 0.9 }, "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ae59eaf36a1ad396e9f657ec9b8b52da6206ed5f" }, { "id": "CVE-2024-47686-ecb7b72c", "signature_type": "Function", "target": { "file": "arch/arm/mach-ep93xx/clock.c", "function": "ep93xx_div_recalc_rate" }, "deprecated": false, "digest": { "length": 288.0, "function_hash": "339653333450055823681005327872389253551" }, "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@27f493e141823db052586010c1532b70b164507c" } ] }