CVE-2024-26702

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-26702
In the Linux kernel, the following vulnerability has been resolved: iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC Recently, we encounter kernel crash in function rm3100_common_probe caused by out of bound access of array rm3100_samp_rates (because of underlying hardware failures). Add boundary check to prevent out of bound access.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/176256ff8abff29335ecff905a09fb49e8dcf513 Patch
https://git.kernel.org/stable/c/1d8c67e94e9e977603473a543d4f322cf2c4aa01 Patch
https://git.kernel.org/stable/c/36a49290d7e6d554020057a409747a092b1d3b56 Patch
https://git.kernel.org/stable/c/57d05dbbcd0b3dc0c252103b43012eef5d6430d1 Patch
https://git.kernel.org/stable/c/7200170e88e3ec54d9e9c63f07514c3cead11481 Patch
https://git.kernel.org/stable/c/792595bab4925aa06532a14dd256db523eb4fa5e Patch
https://git.kernel.org/stable/c/8d5838a473e8e6d812257c69745f5920e4924a60 Patch
https://git.kernel.org/stable/c/176256ff8abff29335ecff905a09fb49e8dcf513 Patch
https://git.kernel.org/stable/c/1d8c67e94e9e977603473a543d4f322cf2c4aa01 Patch
https://git.kernel.org/stable/c/36a49290d7e6d554020057a409747a092b1d3b56 Patch
https://git.kernel.org/stable/c/57d05dbbcd0b3dc0c252103b43012eef5d6430d1 Patch
https://git.kernel.org/stable/c/7200170e88e3ec54d9e9c63f07514c3cead11481 Patch
https://git.kernel.org/stable/c/792595bab4925aa06532a14dd256db523eb4fa5e Patch
https://git.kernel.org/stable/c/8d5838a473e8e6d812257c69745f5920e4924a60 Patch
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html Mailing List Third Party Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc4:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
History

08 Apr 2025, 15:32

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc4:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*
First Time Debian
Linux linux Kernel
Debian debian Linux
Linux
References () https://git.kernel.org/stable/c/176256ff8abff29335ecff905a09fb49e8dcf513 - () https://git.kernel.org/stable/c/176256ff8abff29335ecff905a09fb49e8dcf513 - Patch
References () https://git.kernel.org/stable/c/1d8c67e94e9e977603473a543d4f322cf2c4aa01 - () https://git.kernel.org/stable/c/1d8c67e94e9e977603473a543d4f322cf2c4aa01 - Patch
References () https://git.kernel.org/stable/c/36a49290d7e6d554020057a409747a092b1d3b56 - () https://git.kernel.org/stable/c/36a49290d7e6d554020057a409747a092b1d3b56 - Patch
References () https://git.kernel.org/stable/c/57d05dbbcd0b3dc0c252103b43012eef5d6430d1 - () https://git.kernel.org/stable/c/57d05dbbcd0b3dc0c252103b43012eef5d6430d1 - Patch
References () https://git.kernel.org/stable/c/7200170e88e3ec54d9e9c63f07514c3cead11481 - () https://git.kernel.org/stable/c/7200170e88e3ec54d9e9c63f07514c3cead11481 - Patch
References () https://git.kernel.org/stable/c/792595bab4925aa06532a14dd256db523eb4fa5e - () https://git.kernel.org/stable/c/792595bab4925aa06532a14dd256db523eb4fa5e - Patch
References () https://git.kernel.org/stable/c/8d5838a473e8e6d812257c69745f5920e4924a60 - () https://git.kernel.org/stable/c/8d5838a473e8e6d812257c69745f5920e4924a60 - Patch
References () https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html - () https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html - Mailing List, Third Party Advisory

21 Nov 2024, 09:02

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html -
References () https://git.kernel.org/stable/c/176256ff8abff29335ecff905a09fb49e8dcf513 - () https://git.kernel.org/stable/c/176256ff8abff29335ecff905a09fb49e8dcf513 -
References () https://git.kernel.org/stable/c/1d8c67e94e9e977603473a543d4f322cf2c4aa01 - () https://git.kernel.org/stable/c/1d8c67e94e9e977603473a543d4f322cf2c4aa01 -
References () https://git.kernel.org/stable/c/36a49290d7e6d554020057a409747a092b1d3b56 - () https://git.kernel.org/stable/c/36a49290d7e6d554020057a409747a092b1d3b56 -
References () https://git.kernel.org/stable/c/57d05dbbcd0b3dc0c252103b43012eef5d6430d1 - () https://git.kernel.org/stable/c/57d05dbbcd0b3dc0c252103b43012eef5d6430d1 -
References () https://git.kernel.org/stable/c/7200170e88e3ec54d9e9c63f07514c3cead11481 - () https://git.kernel.org/stable/c/7200170e88e3ec54d9e9c63f07514c3cead11481 -
References () https://git.kernel.org/stable/c/792595bab4925aa06532a14dd256db523eb4fa5e - () https://git.kernel.org/stable/c/792595bab4925aa06532a14dd256db523eb4fa5e -
References () https://git.kernel.org/stable/c/8d5838a473e8e6d812257c69745f5920e4924a60 - () https://git.kernel.org/stable/c/8d5838a473e8e6d812257c69745f5920e4924a60 -

05 Nov 2024, 15:35

Type Values Removed Values Added
CWE CWE-125
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

05 Nov 2024, 10:15

Type Values Removed Values Added
References
  • {'url': 'https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html', 'source': '416baaa9-dc9f-4396-8d5f-8c081fb06d67'}

25 Jun 2024, 22:15

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html -

03 Apr 2024, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-04-03 15:15

Updated : 2025-04-08 15:32

NVD link : CVE-2024-26702

Mitre link : CVE-2024-26702

CVE.ORG link : CVE-2024-26702

JSON object : View

Products Affected

debian

  • debian_linux

linux

  • linux_kernel
CWE
CWE-125

Out-of-bounds Read