CVE-2024-26971— clk: qcom: gcc-ipq5018: fix terminating of frequency table arrays
Possible ATT&CK Techniques 1AI
T1211 · Exploitation for StealthAffected Version Matrix 10
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Linux | Linux | e3fdbef1bab8e372981c8cc4d8febbaa76c490b0< b0cf3d200e8a72b6d28e6e088c062b4a98cb5eaf | affected |
e3fdbef1bab8e372981c8cc4d8febbaa76c490b0< c8f4bef0667947b826848db1c45a645f751357c1 | affected | ||
e3fdbef1bab8e372981c8cc4d8febbaa76c490b0< 50c3acd460551cdf9d8ac6fe0c04f2de0e8e0872 | affected | ||
e3fdbef1bab8e372981c8cc4d8febbaa76c490b0< 90ad946fff70f312b8d23226afc38c13ddd88c4b | affected | ||
6.6 | affected | ||
< 6.6 | unaffected | ||
6.6.24≤ 6.6.* | unaffected | ||
6.7.12≤ 6.7.* | unaffected | ||
| … +2 more rows | |||
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2024-26971
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
clk: qcom: gcc-ipq5018: fix terminating of frequency table arrays
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: clk: qcom: gcc-ipq5018: fix terminating of frequency table arrays The frequency table arrays are supposed to be terminated with an empty element. Add such entry to the end of the arrays where it is missing in order to avoid possible out-of-bound access when the table is traversed by functions like qcom_find_freq() or qcom_find_freq_floor().
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于允许越界访问。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2024-26971
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-26971
请登录查看更多情报信息。
Other References for CVE-2024-26971 (3)
Same Patch Batch · Linux · 2024-05-01 · 159 CVEs total
| CVE-2024-27388 | 9.8 CRITICAL | SUNRPC: fix some memleaks in gssx_dec_option_array |
| CVE-2024-26953 | 9.8 CRITICAL | net: esp: fix bad handling of pages from page_pool |
| CVE-2024-26931 | 8.8 HIGH | scsi: qla2xxx: Fix command flush on cable pull |
| CVE-2024-27053 | 8.8 HIGH | wifi: wilc1000: fix RCU usage in connect path |
| CVE-2024-26990 | 8.8 HIGH | KVM: x86/mmu: Write-protect L2 SPTEs in TDP MMU when clearing dirty status |
| CVE-2024-26952 | 8.3 HIGH | ksmbd: fix potencial out-of-bounds when buffer offset is invalid |
| CVE-2024-27018 | 8.2 HIGH | netfilter: br_netfilter: skip conntrack input hook for promisc packets |
| CVE-2024-26936 | 8.2 HIGH | ksmbd: validate request buffer size in smb2_allocate_rsp_buf() |
| CVE-2024-26980 | 8.2 HIGH | ksmbd: fix slab-out-of-bounds in smb2_allocate_rsp_buf |
| CVE-2024-26954 | 8.1 HIGH | ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16() |
| CVE-2024-26994 | 7.8 HIGH | speakup: Avoid crash on very long word |
| CVE-2024-26966 | 7.8 HIGH | clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays |
| CVE-2024-26974 | 7.8 HIGH | crypto: qat - resolve race condition during AER recovery |
| CVE-2024-26976 | 7.8 HIGH | KVM: Always flush async #PF workqueue when vCPU is being destroyed |
| CVE-2024-27062 | 7.8 HIGH | nouveau: lock the client object tree. |
| CVE-2024-27061 | 7.8 HIGH | crypto: sun8i-ce - Fix use after free in unprepare |
| CVE-2024-26983 | 7.8 HIGH | bootconfig: use memblock_free_late to free xbc memory to buddy |
| CVE-2024-27058 | 7.8 HIGH | tmpfs: fix race on handling dquot rbtree |
| CVE-2024-27056 | 7.8 HIGH | wifi: iwlwifi: mvm: ensure offloading TID queue exists |
| CVE-2024-27017 | 7.8 HIGH | netfilter: nft_set_pipapo: walk over current view on netlink dump |
Showing top 20 of 159 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Linux
- CVE-2026-64565
Input: ims-pcu - fix heap-buffer-overflow in ims_pcu_process - CVE-2026-64564
sctp: don't free the ASCONF's own transport in DEL-IP proces - CVE-2026-64563
rhashtable: clear stale iter->p on table restart - CVE-2026-64562
KVM: nVMX: Hide shadow VMCS right after VMCLEAR - CVE-2026-64561
KVM: x86: Check for invalid/obsolete root *after* making MMU
Same vendor: Linux
- CVE-2026-64565
Input: ims-pcu - fix heap-buffer-overflow in ims_pcu_process - CVE-2026-64564
sctp: don't free the ASCONF's own transport in DEL-IP proces - CVE-2026-64563
rhashtable: clear stale iter->p on table restart - CVE-2026-64562
KVM: nVMX: Hide shadow VMCS right after VMCLEAR - CVE-2026-64561
KVM: x86: Check for invalid/obsolete root *after* making MMU
V. Comments for CVE-2024-26971
No comments yet