CVE-2024-53163

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to an off-by-one error in the uof get name() function of the QAT 420xx driver in the Linux kernel, which can lead to an out-of-bounds access in memory. This could potentially allow an attacker to gain unauthorized access to protected information. The error occurs because the comparison operator used is > instead of >=, which can cause the function to access memory outside the bounds of the fw objs[] array.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.