CVE-2024-26702 - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC Recently, we encounter kernel crash in function rm3100_common_probe caused by out of bound access of array rm3100_samp_rates (because of underlying hardware failures). Add boundary check to prevent out of bound access.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/176256ff8abff29335ecff905a09fb49e8dcf513
https://git.kernel.org/stable/c/1d8c67e94e9e977603473a543d4f322cf2c4aa01
https://git.kernel.org/stable/c/36a49290d7e6d554020057a409747a092b1d3b56
https://git.kernel.org/stable/c/57d05dbbcd0b3dc0c252103b43012eef5d6430d1
https://git.kernel.org/stable/c/7200170e88e3ec54d9e9c63f07514c3cead11481
https://git.kernel.org/stable/c/792595bab4925aa06532a14dd256db523eb4fa5e
https://git.kernel.org/stable/c/8d5838a473e8e6d812257c69745f5920e4924a60
https://lore.kernel.org/linux-cve-announce/2024040339-CVE-2024-26702-acda@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2024-26702
https://www.cve.org/CVERecord?id=CVE-2024-26702

History

Tue, 05 Nov 2024 15:15:00 +0000

Type	Values Removed	Values Added
Metrics	cvssV3_1 `{'score': 6.0, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H'}`	cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}`

Tue, 05 Nov 2024 10:45:00 +0000

Type	Values Removed	Values Added
References	https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-04-03T14:55:01.025Z

Updated: 2024-11-05T15:06:19.230Z

Reserved: 2024-02-19T14:20:24.157Z

Link: CVE-2024-26702

Vulnrichment

Updated: 2024-08-02T00:14:12.653Z

NVD

Status : Awaiting Analysis

Published: 2024-04-03T15:15:53.087

Modified: 2024-11-05T15:35:09.023

Link: CVE-2024-26702

Redhat

Severity : Low

Publid Date: 2024-04-03T00:00:00Z

Links: CVE-2024-26702 - Bugzilla

{"dataType": "CVE_RECORD", "cveMetadata": {"cveId": "CVE-2024-26702", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-02-19T14:20:24.157Z", "datePublished": "2024-04-03T14:55:01.025Z", "dateUpdated": "2024-11-05T15:06:19.230Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-11-05T09:14:09.923Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC\n\nRecently, we encounter kernel crash in function rm3100_common_probe\ncaused by out of bound access of array rm3100_samp_rates (because of\nunderlying hardware failures). Add boundary check to prevent out of\nbound access."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/iio/magnetometer/rm3100-core.c"], "versions": [{"version": "121354b2eceb", "lessThan": "7200170e88e3", "status": "affected", "versionType": "git"}, {"version": "121354b2eceb", "lessThan": "36a49290d7e6", "status": "affected", "versionType": "git"}, {"version": "121354b2eceb", "lessThan": "8d5838a473e8", "status": "affected", "versionType": "git"}, {"version": "121354b2eceb", "lessThan": "176256ff8abf", "status": "affected", "versionType": "git"}, {"version": "121354b2eceb", "lessThan": "1d8c67e94e9e", "status": "affected", "versionType": "git"}, {"version": "121354b2eceb", "lessThan": "57d05dbbcd0b", "status": "affected", "versionType": "git"}, {"version": "121354b2eceb", "lessThan": "792595bab492", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/iio/magnetometer/rm3100-core.c"], "versions": [{"version": "5.0", "status": "affected"}, {"version": "0", "lessThan": "5.0", "status": "unaffected", "versionType": "semver"}, {"version": "5.4.269", "lessThanOrEqual": "5.4.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.210", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.149", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.79", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.18", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.7.6", "lessThanOrEqual": "6.7.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.8", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "references": [{"url": "https://git.kernel.org/stable/c/7200170e88e3ec54d9e9c63f07514c3cead11481"}, {"url": "https://git.kernel.org/stable/c/36a49290d7e6d554020057a409747a092b1d3b56"}, {"url": "https://git.kernel.org/stable/c/8d5838a473e8e6d812257c69745f5920e4924a60"}, {"url": "https://git.kernel.org/stable/c/176256ff8abff29335ecff905a09fb49e8dcf513"}, {"url": "https://git.kernel.org/stable/c/1d8c67e94e9e977603473a543d4f322cf2c4aa01"}, {"url": "https://git.kernel.org/stable/c/57d05dbbcd0b3dc0c252103b43012eef5d6430d1"}, {"url": "https://git.kernel.org/stable/c/792595bab4925aa06532a14dd256db523eb4fa5e"}], "title": "iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC", "x_generator": {"engine": "bippy-9e1c9544281a"}}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-125", "lang": "en", "description": "CWE-125 Out-of-bounds Read"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2024-04-04T15:20:17.184977Z", "id": "CVE-2024-26702", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-05T15:06:19.230Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T00:14:12.653Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/7200170e88e3ec54d9e9c63f07514c3cead11481", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/36a49290d7e6d554020057a409747a092b1d3b56", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/8d5838a473e8e6d812257c69745f5920e4924a60", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/176256ff8abff29335ecff905a09fb49e8dcf513", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/1d8c67e94e9e977603473a543d4f322cf2c4aa01", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/57d05dbbcd0b3dc0c252103b43012eef5d6430d1", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/792595bab4925aa06532a14dd256db523eb4fa5e", "tags": ["x_transferred"]}, {"url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html", "tags": ["x_transferred"]}]}]}, "dataVersion": "5.1"}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/7200170e88e3ec54d9e9c63f07514c3cead11481", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/36a49290d7e6d554020057a409747a092b1d3b56", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/8d5838a473e8e6d812257c69745f5920e4924a60", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/176256ff8abff29335ecff905a09fb49e8dcf513", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/1d8c67e94e9e977603473a543d4f322cf2c4aa01", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/57d05dbbcd0b3dc0c252103b43012eef5d6430d1", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/792595bab4925aa06532a14dd256db523eb4fa5e", "tags": ["x_transferred"]}, {"url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T00:14:12.653Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2024-26702", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-04-04T15:20:17.184977Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-125", "description": "CWE-125 Out-of-bounds Read"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-05-23T19:01:21.988Z"}}], "cna": {"title": "iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "121354b2eceb", "lessThan": "7200170e88e3", "versionType": "git"}, {"status": "affected", "version": "121354b2eceb", "lessThan": "36a49290d7e6", "versionType": "git"}, {"status": "affected", "version": "121354b2eceb", "lessThan": "8d5838a473e8", "versionType": "git"}, {"status": "affected", "version": "121354b2eceb", "lessThan": "176256ff8abf", "versionType": "git"}, {"status": "affected", "version": "121354b2eceb", "lessThan": "1d8c67e94e9e", "versionType": "git"}, {"status": "affected", "version": "121354b2eceb", "lessThan": "57d05dbbcd0b", "versionType": "git"}, {"status": "affected", "version": "121354b2eceb", "lessThan": "792595bab492", "versionType": "git"}], "programFiles": ["drivers/iio/magnetometer/rm3100-core.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "5.0"}, {"status": "unaffected", "version": "0", "lessThan": "5.0", "versionType": "semver"}, {"status": "unaffected", "version": "5.4.269", "versionType": "semver", "lessThanOrEqual": "5.4.*"}, {"status": "unaffected", "version": "5.10.210", "versionType": "semver", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.15.149", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.79", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.18", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.7.6", "versionType": "semver", "lessThanOrEqual": "6.7.*"}, {"status": "unaffected", "version": "6.8", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/iio/magnetometer/rm3100-core.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/7200170e88e3ec54d9e9c63f07514c3cead11481"}, {"url": "https://git.kernel.org/stable/c/36a49290d7e6d554020057a409747a092b1d3b56"}, {"url": "https://git.kernel.org/stable/c/8d5838a473e8e6d812257c69745f5920e4924a60"}, {"url": "https://git.kernel.org/stable/c/176256ff8abff29335ecff905a09fb49e8dcf513"}, {"url": "https://git.kernel.org/stable/c/1d8c67e94e9e977603473a543d4f322cf2c4aa01"}, {"url": "https://git.kernel.org/stable/c/57d05dbbcd0b3dc0c252103b43012eef5d6430d1"}, {"url": "https://git.kernel.org/stable/c/792595bab4925aa06532a14dd256db523eb4fa5e"}], "x_generator": {"engine": "bippy-9e1c9544281a"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC\n\nRecently, we encounter kernel crash in function rm3100_common_probe\ncaused by out of bound access of array rm3100_samp_rates (because of\nunderlying hardware failures). Add boundary check to prevent out of\nbound access."}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-11-05T09:14:09.923Z"}}}, "cveMetadata": {"cveId": "CVE-2024-26702", "state": "PUBLISHED", "dateUpdated": "2024-11-05T15:06:19.230Z", "dateReserved": "2024-02-19T14:20:24.157Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-04-03T14:55:01.025Z", "assignerShortName": "Linux"}, "dataVersion": "5.1"}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC\n\nRecently, we encounter kernel crash in function rm3100_common_probe\ncaused by out of bound access of array rm3100_samp_rates (because of\nunderlying hardware failures). Add boundary check to prevent out of\nbound access."}, {"lang": "es", "value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: iio: magnet\u00f3metro: rm3100: agregue verificaci\u00f3n de los l\u00edmites para el valor le\u00eddo de RM3100_REG_TMRC Recientemente, encontramos una falla del kernel en la funci\u00f3n rm3100_common_probe causada por el acceso fuera de los l\u00edmites de la matriz rm3100_samp_rates (debido al hardware subyacente fallas). Agregue verificaci\u00f3n de los l\u00edmites para evitar el acceso fuera de los l\u00edmites."}], "id": "CVE-2024-26702", "lastModified": "2024-11-05T15:35:09.023", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2024-04-03T15:15:53.087", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/176256ff8abff29335ecff905a09fb49e8dcf513"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/1d8c67e94e9e977603473a543d4f322cf2c4aa01"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/36a49290d7e6d554020057a409747a092b1d3b56"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/57d05dbbcd0b3dc0c252103b43012eef5d6430d1"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/7200170e88e3ec54d9e9c63f07514c3cead11481"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/792595bab4925aa06532a14dd256db523eb4fa5e"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/8d5838a473e8e6d812257c69745f5920e4924a60"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-125"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}