PT-2024-7870 · Linux+4 · Linux Kernel+4

CVE-2024-26968

·

Published

2024-03-02

·

Updated

2025-02-03

CVSS v3.1

7.3

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue is related to the Linux kernel's qcom component, where frequency table arrays are not properly terminated, leading to potential out-of-bound access when traversed by functions like qcom find freq() or qcom find freq floor(). This could allow an attacker to impact the availability of protected information. The vulnerability is related to errors in reading beyond memory boundaries.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Improper Validation of Array Index

Out of bounds Read

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2024-09372
CVE-2024-26968
SUSE-SU-2025:20008-1
SUSE-SU-2025:20028-1
USN-6816-1
USN-6817-1
USN-6817-2
USN-6817-3
USN-6878-1

Affected Products

Astra Linux
Linuxmint
Linux Kernel
Red Os
Ubuntu