Vulnerability in Linux

CVE-2024-26971

In the Linux kernel, the following vulnerability has been resolved: clk: qcom: gcc-ipq5018: fix terminating of frequency table arrays The frequency table arrays are supposed to be terminated with an empty element. Add such entry to the end of the arrays where it is missing in order to avoid possible out-of-bound access when the table is traversed by functions like qcom_find_freq() or qcom_find_freq_floor().

EPSS: 0.002 (12.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.3 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H.

Affected products

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2024-26971?
CVE-2024-26971 is a high-severity vulnerability in Linux, classified under Improper Validation of Array Index. CVSS score: 7.3/10. Published 2024-05-01.
How severe is CVE-2024-26971?
High severity. CVSS v3 base score is 7.3 out of 10.