CVE-2024-47686

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.58

Description The issue is related to an off-by-one error in the ep93xx div recalc rate() function, which can lead to an out-of-bounds read. The psc->div[] array has psc->num div elements, and the condition should be >= instead of > to prevent this issue. This error occurs when calling clk hw register div() and is related to adc divisors and ARRAY SIZE(adc divisors).

Recommendations For Linux kernel versions prior to 6.6.58, update to version 6.6.58 or later to resolve the issue. As a temporary workaround, consider modifying the condition in the ep93xx div recalc rate() function to >= instead of > to prevent the out-of-bounds read. However, this modification should be done with caution and ideally by applying the official patch or updating the kernel.