Vulnerability in Linux
CVE-2024-26967
In the Linux kernel, the following vulnerability has been resolved: clk: qcom: camcc-sc8280xp: fix terminating of frequency table arrays The frequency table arrays are supposed to be terminated with an empty element. Add such entry to the end of the arrays where it is missing in order to avoid possible out-of-bound access when the table is traversed by functions like qcom_find_freq() or qcom_find_freq_floor(). Only compile tested.
EPSS: 0.002 (9.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.3 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H.
Affected products
- Linux — versions ff93872a9c6168992ee41f2da9d9c3b8a6f8a8e5, 6.8, 0
- Linux Linux_kernel
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2024-26967?
- CVE-2024-26967 is a high-severity vulnerability in Linux, classified under Improper Validation of Array Index. CVSS score: 7.3/10. Published 2024-05-01.
- How severe is CVE-2024-26967?
- High severity. CVSS v3 base score is 7.3 out of 10.