CVE-2024-26969 (GCVE-0-2024-26969)
Vulnerability from cvelistv5
Published
2024-05-01 05:19
Modified
2026-08-05 11:28
Severity ?
7.3 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Summary
In the Linux kernel, the following vulnerability has been resolved: clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays The frequency table arrays are supposed to be terminated with an empty element. Add such entry to the end of the arrays where it is missing in order to avoid possible out-of-bound access when the table is traversed by functions like qcom_find_freq() or qcom_find_freq_floor(). Only compile tested.
References
Impacted products
Vendor Product Version
Linux Linux Version: 9607f6224b3966652ce3f4e620c4694df190b64a
Version: 9607f6224b3966652ce3f4e620c4694df190b64a
Version: 9607f6224b3966652ce3f4e620c4694df190b64a
Version: 9607f6224b3966652ce3f4e620c4694df190b64a
Version: 9607f6224b3966652ce3f4e620c4694df190b64a
Version: 9607f6224b3966652ce3f4e620c4694df190b64a
Version: 9607f6224b3966652ce3f4e620c4694df190b64a
Version: 9607f6224b3966652ce3f4e620c4694df190b64a
Version: 9607f6224b3966652ce3f4e620c4694df190b64a
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T00:21:05.840Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/e117c6e2d1617520f5f7d7f6f6b395f01d8b5a27"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/83fe1bbd9e259ad109827ccfbfc2488e0dea8e94"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/851cc19bdb02556fb13629b3e4fef6f2bdb038fe"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/9de184d4e557d550fb0b7b833b676bda4f269e4f"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/dd92b159c506804ac57adf3742d9728298bb1255"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/b6b31b4c67ea6bd9222e5b73b330554c57f2f90d"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/fc3ac2fcd0a7fad63eba1b359490a4b81720d0f9"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/be9e2752d823eca1d5af67014a1844a9176ff566"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/1040ef5ed95d6fd2628bad387d78a61633e09429"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-26969",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-10T15:45:16.629888Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-11T17:33:44.899Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/clk/qcom/gcc-ipq8074.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "e117c6e2d1617520f5f7d7f6f6b395f01d8b5a27",
              "status": "affected",
              "version": "9607f6224b3966652ce3f4e620c4694df190b64a",
              "versionType": "git"
            },
            {
              "lessThan": "83fe1bbd9e259ad109827ccfbfc2488e0dea8e94",
              "status": "affected",
              "version": "9607f6224b3966652ce3f4e620c4694df190b64a",
              "versionType": "git"
            },
            {
              "lessThan": "851cc19bdb02556fb13629b3e4fef6f2bdb038fe",
              "status": "affected",
              "version": "9607f6224b3966652ce3f4e620c4694df190b64a",
              "versionType": "git"
            },
            {
              "lessThan": "9de184d4e557d550fb0b7b833b676bda4f269e4f",
              "status": "affected",
              "version": "9607f6224b3966652ce3f4e620c4694df190b64a",
              "versionType": "git"
            },
            {
              "lessThan": "dd92b159c506804ac57adf3742d9728298bb1255",
              "status": "affected",
              "version": "9607f6224b3966652ce3f4e620c4694df190b64a",
              "versionType": "git"
            },
            {
              "lessThan": "b6b31b4c67ea6bd9222e5b73b330554c57f2f90d",
              "status": "affected",
              "version": "9607f6224b3966652ce3f4e620c4694df190b64a",
              "versionType": "git"
            },
            {
              "lessThan": "fc3ac2fcd0a7fad63eba1b359490a4b81720d0f9",
              "status": "affected",
              "version": "9607f6224b3966652ce3f4e620c4694df190b64a",
              "versionType": "git"
            },
            {
              "lessThan": "be9e2752d823eca1d5af67014a1844a9176ff566",
              "status": "affected",
              "version": "9607f6224b3966652ce3f4e620c4694df190b64a",
              "versionType": "git"
            },
            {
              "lessThan": "1040ef5ed95d6fd2628bad387d78a61633e09429",
              "status": "affected",
              "version": "9607f6224b3966652ce3f4e620c4694df190b64a",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/clk/qcom/gcc-ipq8074.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.16"
            },
            {
              "lessThan": "4.16",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.312",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.274",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.215",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.154",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.84",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.24",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.7.*",
              "status": "unaffected",
              "version": "6.7.12",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.8.*",
              "status": "unaffected",
              "version": "6.8.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.9",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.312",
                  "versionStartIncluding": "4.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.274",
                  "versionStartIncluding": "4.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.215",
                  "versionStartIncluding": "4.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.154",
                  "versionStartIncluding": "4.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.84",
                  "versionStartIncluding": "4.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.24",
                  "versionStartIncluding": "4.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.7.12",
                  "versionStartIncluding": "4.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.8.3",
                  "versionStartIncluding": "4.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.9",
                  "versionStartIncluding": "4.16",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nclk: qcom: gcc-ipq8074: fix terminating of frequency table arrays\n\nThe frequency table arrays are supposed to be terminated with an\nempty element. Add such entry to the end of the arrays where it\nis missing in order to avoid possible out-of-bound access when\nthe table is traversed by functions like qcom_find_freq() or\nqcom_find_freq_floor().\n\nOnly compile tested."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The vulnerable frequency-table walk lives in an on-SoC global clock-controller driver reached only through in-kernel `clk_set_rate()`/`clk_round_rate()` requests originating from local device access (the PCIe/QMP-PHY aux clock consumers and the sdhci-msm/ICE storage path). No network protocol, packet, or remote peer data reaches `qcom_find_freq()`.\nAC:L - The overrun is fully deterministic \u2014 any rate request exceeding the table\u0027s top entry (19.2 MHz for PCIe aux, 308.57 MHz for SDCC ICE core) runs `for (; f-\u003efreq; f++)` off the array end every time, with no race to win and no memory-layout grooming needed to leave the array. Only the exact bytes read afterwards depend on link layout, not the ability to trigger the defect.\nPR:L - No real-root or init-namespace capability check guards the rate-setting path; the affected RCGs are re-programmed by consumer drivers on paths a basic local user can provoke (device-node open triggering runtime-PM resume on the PCIe controller, eMMC/SD I/O through the ICE-backed storage path). Basic local privileges suffice rather than genuine root.\nUI:N - The out-of-bounds traversal happens entirely inside the kernel clock framework when a rate is requested during normal driver operation. No victim must mount a filesystem, open a file, or take any other action.\nS:U - The out-of-bounds read, the mis-programmed RCG registers, and any resulting fault all remain within the kernel\u0027s own security authority on the affected SoC. No VM, IOMMU, or sandbox boundary is crossed.\nC:H - `qcom_find_freq()` reads an unbounded distance past the end of the array through adjacent kernel `.rodata` until it happens to hit a zero `freq` word, so the disclosure is not bounded to a few bytes. The out-of-bounds word is propagated back to the caller as `req-\u003erate = f-\u003efreq` in `_freq_tbl_determine_rate()` and into readable clock state, potentially exposing relocated pointer values usable to defeat KASLR.\nI:L - There is no out-of-bounds write and no kernel memory corruption \u2014 `src` is validated by `qcom_find_src_index()` and `m`/`n`/`pre_div` are mask-limited before reaching hardware \u2014 but out-of-bounds-derived values are still programmed into the SoC\u0027s RCG control registers via `clk_rcg2_configure()`, mis-configuring the PCIe aux or SDCC inline-crypto-engine clock and risking corrupt transfers on the eMMC/SD path.\nA:H - With `IPQ_GCC_8074` built as a module the tables sit in vmalloc\u0027d module `.rodata`, so the unbounded walk can hit an unmapped guard region and oops the kernel. Short of that, an out-of-spec divider/source programmed onto a live PCIe aux or storage ICE clock makes `update_config()` time out into `WARN(1)` \u2014 a panic under `panic_on_warn` \u2014 and can wedge the affected peripheral."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T11:28:45.154Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/e117c6e2d1617520f5f7d7f6f6b395f01d8b5a27"
        },
        {
          "url": "https://git.kernel.org/stable/c/83fe1bbd9e259ad109827ccfbfc2488e0dea8e94"
        },
        {
          "url": "https://git.kernel.org/stable/c/851cc19bdb02556fb13629b3e4fef6f2bdb038fe"
        },
        {
          "url": "https://git.kernel.org/stable/c/9de184d4e557d550fb0b7b833b676bda4f269e4f"
        },
        {
          "url": "https://git.kernel.org/stable/c/dd92b159c506804ac57adf3742d9728298bb1255"
        },
        {
          "url": "https://git.kernel.org/stable/c/b6b31b4c67ea6bd9222e5b73b330554c57f2f90d"
        },
        {
          "url": "https://git.kernel.org/stable/c/fc3ac2fcd0a7fad63eba1b359490a4b81720d0f9"
        },
        {
          "url": "https://git.kernel.org/stable/c/be9e2752d823eca1d5af67014a1844a9176ff566"
        },
        {
          "url": "https://git.kernel.org/stable/c/1040ef5ed95d6fd2628bad387d78a61633e09429"
        }
      ],
      "title": "clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-26969",
    "datePublished": "2024-05-01T05:19:50.580Z",
    "dateReserved": "2024-02-19T14:20:24.202Z",
    "dateUpdated": "2026-08-05T11:28:45.154Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://git.kernel.org/stable/c/e117c6e2d1617520f5f7d7f6f6b395f01d8b5a27\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/83fe1bbd9e259ad109827ccfbfc2488e0dea8e94\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/851cc19bdb02556fb13629b3e4fef6f2bdb038fe\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/9de184d4e557d550fb0b7b833b676bda4f269e4f\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/dd92b159c506804ac57adf3742d9728298bb1255\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/b6b31b4c67ea6bd9222e5b73b330554c57f2f90d\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/fc3ac2fcd0a7fad63eba1b359490a4b81720d0f9\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/be9e2752d823eca1d5af67014a1844a9176ff566\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/1040ef5ed95d6fd2628bad387d78a61633e09429\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html\", \"tags\": [\"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-02T00:21:05.840Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-26969\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-09-10T15:45:16.629888Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-09-11T12:42:18.481Z\"}}], \"cna\": {\"title\": \"clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays\", \"metrics\": [{\"cvssV3_1\": {\"version\": \"3.1\", \"baseScore\": 7.3, \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"AV:L - The vulnerable frequency-table walk lives in an on-SoC global clock-controller driver reached only through in-kernel `clk_set_rate()`/`clk_round_rate()` requests originating from local device access (the PCIe/QMP-PHY aux clock consumers and the sdhci-msm/ICE storage path). No network protocol, packet, or remote peer data reaches `qcom_find_freq()`.\\nAC:L - The overrun is fully deterministic \\u2014 any rate request exceeding the table\u0027s top entry (19.2 MHz for PCIe aux, 308.57 MHz for SDCC ICE core) runs `for (; f-\u003efreq; f++)` off the array end every time, with no race to win and no memory-layout grooming needed to leave the array. Only the exact bytes read afterwards depend on link layout, not the ability to trigger the defect.\\nPR:L - No real-root or init-namespace capability check guards the rate-setting path; the affected RCGs are re-programmed by consumer drivers on paths a basic local user can provoke (device-node open triggering runtime-PM resume on the PCIe controller, eMMC/SD I/O through the ICE-backed storage path). Basic local privileges suffice rather than genuine root.\\nUI:N - The out-of-bounds traversal happens entirely inside the kernel clock framework when a rate is requested during normal driver operation. No victim must mount a filesystem, open a file, or take any other action.\\nS:U - The out-of-bounds read, the mis-programmed RCG registers, and any resulting fault all remain within the kernel\u0027s own security authority on the affected SoC. No VM, IOMMU, or sandbox boundary is crossed.\\nC:H - `qcom_find_freq()` reads an unbounded distance past the end of the array through adjacent kernel `.rodata` until it happens to hit a zero `freq` word, so the disclosure is not bounded to a few bytes. The out-of-bounds word is propagated back to the caller as `req-\u003erate = f-\u003efreq` in `_freq_tbl_determine_rate()` and into readable clock state, potentially exposing relocated pointer values usable to defeat KASLR.\\nI:L - There is no out-of-bounds write and no kernel memory corruption \\u2014 `src` is validated by `qcom_find_src_index()` and `m`/`n`/`pre_div` are mask-limited before reaching hardware \\u2014 but out-of-bounds-derived values are still programmed into the SoC\u0027s RCG control registers via `clk_rcg2_configure()`, mis-configuring the PCIe aux or SDCC inline-crypto-engine clock and risking corrupt transfers on the eMMC/SD path.\\nA:H - With `IPQ_GCC_8074` built as a module the tables sit in vmalloc\u0027d module `.rodata`, so the unbounded walk can hit an unmapped guard region and oops the kernel. Short of that, an out-of-spec divider/source programmed onto a live PCIe aux or storage ICE clock makes `update_config()` time out into `WARN(1)` \\u2014 a panic under `panic_on_warn` \\u2014 and can wedge the affected peripheral.\"}]}], \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"9607f6224b3966652ce3f4e620c4694df190b64a\", \"lessThan\": \"e117c6e2d1617520f5f7d7f6f6b395f01d8b5a27\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"9607f6224b3966652ce3f4e620c4694df190b64a\", \"lessThan\": \"83fe1bbd9e259ad109827ccfbfc2488e0dea8e94\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"9607f6224b3966652ce3f4e620c4694df190b64a\", \"lessThan\": \"851cc19bdb02556fb13629b3e4fef6f2bdb038fe\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"9607f6224b3966652ce3f4e620c4694df190b64a\", \"lessThan\": \"9de184d4e557d550fb0b7b833b676bda4f269e4f\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"9607f6224b3966652ce3f4e620c4694df190b64a\", \"lessThan\": \"dd92b159c506804ac57adf3742d9728298bb1255\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"9607f6224b3966652ce3f4e620c4694df190b64a\", \"lessThan\": \"b6b31b4c67ea6bd9222e5b73b330554c57f2f90d\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"9607f6224b3966652ce3f4e620c4694df190b64a\", \"lessThan\": \"fc3ac2fcd0a7fad63eba1b359490a4b81720d0f9\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"9607f6224b3966652ce3f4e620c4694df190b64a\", \"lessThan\": \"be9e2752d823eca1d5af67014a1844a9176ff566\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"9607f6224b3966652ce3f4e620c4694df190b64a\", \"lessThan\": \"1040ef5ed95d6fd2628bad387d78a61633e09429\", \"versionType\": \"git\"}], \"programFiles\": [\"drivers/clk/qcom/gcc-ipq8074.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.16\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"4.16\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"4.19.312\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.19.*\"}, {\"status\": \"unaffected\", \"version\": \"5.4.274\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.4.*\"}, {\"status\": \"unaffected\", \"version\": \"5.10.215\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.10.*\"}, {\"status\": \"unaffected\", \"version\": \"5.15.154\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.15.*\"}, {\"status\": \"unaffected\", \"version\": \"6.1.84\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.1.*\"}, {\"status\": \"unaffected\", \"version\": \"6.6.24\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.6.*\"}, {\"status\": \"unaffected\", \"version\": \"6.7.12\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.7.*\"}, {\"status\": \"unaffected\", \"version\": \"6.8.3\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.8.*\"}, {\"status\": \"unaffected\", \"version\": \"6.9\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"drivers/clk/qcom/gcc-ipq8074.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/e117c6e2d1617520f5f7d7f6f6b395f01d8b5a27\"}, {\"url\": \"https://git.kernel.org/stable/c/83fe1bbd9e259ad109827ccfbfc2488e0dea8e94\"}, {\"url\": \"https://git.kernel.org/stable/c/851cc19bdb02556fb13629b3e4fef6f2bdb038fe\"}, {\"url\": \"https://git.kernel.org/stable/c/9de184d4e557d550fb0b7b833b676bda4f269e4f\"}, {\"url\": \"https://git.kernel.org/stable/c/dd92b159c506804ac57adf3742d9728298bb1255\"}, {\"url\": \"https://git.kernel.org/stable/c/b6b31b4c67ea6bd9222e5b73b330554c57f2f90d\"}, {\"url\": \"https://git.kernel.org/stable/c/fc3ac2fcd0a7fad63eba1b359490a4b81720d0f9\"}, {\"url\": \"https://git.kernel.org/stable/c/be9e2752d823eca1d5af67014a1844a9176ff566\"}, {\"url\": \"https://git.kernel.org/stable/c/1040ef5ed95d6fd2628bad387d78a61633e09429\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nclk: qcom: gcc-ipq8074: fix terminating of frequency table arrays\\n\\nThe frequency table arrays are supposed to be terminated with an\\nempty element. Add such entry to the end of the arrays where it\\nis missing in order to avoid possible out-of-bound access when\\nthe table is traversed by functions like qcom_find_freq() or\\nqcom_find_freq_floor().\\n\\nOnly compile tested.\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.19.312\", \"versionStartIncluding\": \"4.16\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.4.274\", \"versionStartIncluding\": \"4.16\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.10.215\", \"versionStartIncluding\": \"4.16\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.15.154\", \"versionStartIncluding\": \"4.16\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1.84\", \"versionStartIncluding\": \"4.16\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.6.24\", \"versionStartIncluding\": \"4.16\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.7.12\", \"versionStartIncluding\": \"4.16\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.8.3\", \"versionStartIncluding\": \"4.16\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.9\", \"versionStartIncluding\": \"4.16\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2026-08-05T11:28:45.154Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-26969\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-08-05T11:28:45.154Z\", \"dateReserved\": \"2024-02-19T14:20:24.202Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-05-01T05:19:50.580Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.