CVE-2024-26751 - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: ARM: ep93xx: Add terminator to gpiod_lookup_table Without the terminator, if a con_id is passed to gpio_find() that does not exist in the lookup table the function will not stop looping correctly, and eventually cause an oops.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/6abe0895b63c20de06685c8544b908c7e413efa8
https://git.kernel.org/stable/c/70d92abbe29692a3de8697ae082c60f2d21ab482
https://git.kernel.org/stable/c/786f089086b505372fb3f4f008d57e7845fff0d8
https://git.kernel.org/stable/c/97ba7c1f9c0a2401e644760d857b2386aa895997
https://git.kernel.org/stable/c/999a8bb70da2946336327b4480824d1691cae1fa
https://git.kernel.org/stable/c/9e200a06ae2abb321939693008290af32b33dd6e
https://git.kernel.org/stable/c/eec6cbbfa1e8d685cc245cfd5626d0715a127a48
https://git.kernel.org/stable/c/fdf87a0dc26d0550c60edc911cda42f9afec3557
https://lore.kernel.org/linux-cve-announce/2024040302-CVE-2024-26751-fd31@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2024-26751
https://www.cve.org/CVERecord?id=CVE-2024-26751

History

Tue, 05 Nov 2024 10:45:00 +0000

Type	Values Removed	Values Added
References	https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-04-03T17:00:36.523Z

Updated: 2024-11-05T09:15:04.741Z

Reserved: 2024-02-19T14:20:24.169Z

Link: CVE-2024-26751

Vulnrichment

Updated: 2024-08-02T00:14:13.203Z

NVD

Status : Awaiting Analysis

Published: 2024-04-03T17:15:51.840

Modified: 2024-11-05T10:15:46.877

Link: CVE-2024-26751

Redhat

Severity : Low

Publid Date: 2024-04-03T00:00:00Z

Links: CVE-2024-26751 - Bugzilla

{"dataType": "CVE_RECORD", "cveMetadata": {"cveId": "CVE-2024-26751", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-02-19T14:20:24.169Z", "datePublished": "2024-04-03T17:00:36.523Z", "dateUpdated": "2024-11-05T09:15:04.741Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-11-05T09:15:04.741Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nARM: ep93xx: Add terminator to gpiod_lookup_table\n\nWithout the terminator, if a con_id is passed to gpio_find() that\ndoes not exist in the lookup table the function will not stop looping\ncorrectly, and eventually cause an oops."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["arch/arm/mach-ep93xx/core.c"], "versions": [{"version": "b2e63555592f", "lessThan": "9e200a06ae2a", "status": "affected", "versionType": "git"}, {"version": "b2e63555592f", "lessThan": "999a8bb70da2", "status": "affected", "versionType": "git"}, {"version": "b2e63555592f", "lessThan": "70d92abbe296", "status": "affected", "versionType": "git"}, {"version": "b2e63555592f", "lessThan": "eec6cbbfa1e8", "status": "affected", "versionType": "git"}, {"version": "b2e63555592f", "lessThan": "786f089086b5", "status": "affected", "versionType": "git"}, {"version": "b2e63555592f", "lessThan": "97ba7c1f9c0a", "status": "affected", "versionType": "git"}, {"version": "b2e63555592f", "lessThan": "6abe0895b63c", "status": "affected", "versionType": "git"}, {"version": "b2e63555592f", "lessThan": "fdf87a0dc26d", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["arch/arm/mach-ep93xx/core.c"], "versions": [{"version": "4.15", "status": "affected"}, {"version": "0", "lessThan": "4.15", "status": "unaffected", "versionType": "semver"}, {"version": "4.19.308", "lessThanOrEqual": "4.19.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.4.270", "lessThanOrEqual": "5.4.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.211", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.150", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.80", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.19", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.7.7", "lessThanOrEqual": "6.7.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.8", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "references": [{"url": "https://git.kernel.org/stable/c/9e200a06ae2abb321939693008290af32b33dd6e"}, {"url": "https://git.kernel.org/stable/c/999a8bb70da2946336327b4480824d1691cae1fa"}, {"url": "https://git.kernel.org/stable/c/70d92abbe29692a3de8697ae082c60f2d21ab482"}, {"url": "https://git.kernel.org/stable/c/eec6cbbfa1e8d685cc245cfd5626d0715a127a48"}, {"url": "https://git.kernel.org/stable/c/786f089086b505372fb3f4f008d57e7845fff0d8"}, {"url": "https://git.kernel.org/stable/c/97ba7c1f9c0a2401e644760d857b2386aa895997"}, {"url": "https://git.kernel.org/stable/c/6abe0895b63c20de06685c8544b908c7e413efa8"}, {"url": "https://git.kernel.org/stable/c/fdf87a0dc26d0550c60edc911cda42f9afec3557"}], "title": "ARM: ep93xx: Add terminator to gpiod_lookup_table", "x_generator": {"engine": "bippy-9e1c9544281a"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-26751", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-04-03T18:36:01.250592Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T17:48:52.747Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T00:14:13.203Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/9e200a06ae2abb321939693008290af32b33dd6e", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/999a8bb70da2946336327b4480824d1691cae1fa", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/70d92abbe29692a3de8697ae082c60f2d21ab482", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/eec6cbbfa1e8d685cc245cfd5626d0715a127a48", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/786f089086b505372fb3f4f008d57e7845fff0d8", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/97ba7c1f9c0a2401e644760d857b2386aa895997", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/6abe0895b63c20de06685c8544b908c7e413efa8", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/fdf87a0dc26d0550c60edc911cda42f9afec3557", "tags": ["x_transferred"]}, {"url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html", "tags": ["x_transferred"]}]}]}, "dataVersion": "5.1"}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/9e200a06ae2abb321939693008290af32b33dd6e", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/999a8bb70da2946336327b4480824d1691cae1fa", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/70d92abbe29692a3de8697ae082c60f2d21ab482", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/eec6cbbfa1e8d685cc245cfd5626d0715a127a48", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/786f089086b505372fb3f4f008d57e7845fff0d8", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/97ba7c1f9c0a2401e644760d857b2386aa895997", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/6abe0895b63c20de06685c8544b908c7e413efa8", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/fdf87a0dc26d0550c60edc911cda42f9afec3557", "tags": ["x_transferred"]}, {"url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T00:14:13.203Z"}}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-26751", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-04-03T18:36:01.250592Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-05-23T19:01:21.824Z"}, "title": "CISA ADP Vulnrichment"}], "cna": {"title": "ARM: ep93xx: Add terminator to gpiod_lookup_table", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "b2e63555592f", "lessThan": "9e200a06ae2a", "versionType": "git"}, {"status": "affected", "version": "b2e63555592f", "lessThan": "999a8bb70da2", "versionType": "git"}, {"status": "affected", "version": "b2e63555592f", "lessThan": "70d92abbe296", "versionType": "git"}, {"status": "affected", "version": "b2e63555592f", "lessThan": "eec6cbbfa1e8", "versionType": "git"}, {"status": "affected", "version": "b2e63555592f", "lessThan": "786f089086b5", "versionType": "git"}, {"status": "affected", "version": "b2e63555592f", "lessThan": "97ba7c1f9c0a", "versionType": "git"}, {"status": "affected", "version": "b2e63555592f", "lessThan": "6abe0895b63c", "versionType": "git"}, {"status": "affected", "version": "b2e63555592f", "lessThan": "fdf87a0dc26d", "versionType": "git"}], "programFiles": ["arch/arm/mach-ep93xx/core.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "4.15"}, {"status": "unaffected", "version": "0", "lessThan": "4.15", "versionType": "semver"}, {"status": "unaffected", "version": "4.19.308", "versionType": "semver", "lessThanOrEqual": "4.19.*"}, {"status": "unaffected", "version": "5.4.270", "versionType": "semver", "lessThanOrEqual": "5.4.*"}, {"status": "unaffected", "version": "5.10.211", "versionType": "semver", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.15.150", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.80", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.19", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.7.7", "versionType": "semver", "lessThanOrEqual": "6.7.*"}, {"status": "unaffected", "version": "6.8", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["arch/arm/mach-ep93xx/core.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/9e200a06ae2abb321939693008290af32b33dd6e"}, {"url": "https://git.kernel.org/stable/c/999a8bb70da2946336327b4480824d1691cae1fa"}, {"url": "https://git.kernel.org/stable/c/70d92abbe29692a3de8697ae082c60f2d21ab482"}, {"url": "https://git.kernel.org/stable/c/eec6cbbfa1e8d685cc245cfd5626d0715a127a48"}, {"url": "https://git.kernel.org/stable/c/786f089086b505372fb3f4f008d57e7845fff0d8"}, {"url": "https://git.kernel.org/stable/c/97ba7c1f9c0a2401e644760d857b2386aa895997"}, {"url": "https://git.kernel.org/stable/c/6abe0895b63c20de06685c8544b908c7e413efa8"}, {"url": "https://git.kernel.org/stable/c/fdf87a0dc26d0550c60edc911cda42f9afec3557"}], "x_generator": {"engine": "bippy-9e1c9544281a"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nARM: ep93xx: Add terminator to gpiod_lookup_table\n\nWithout the terminator, if a con_id is passed to gpio_find() that\ndoes not exist in the lookup table the function will not stop looping\ncorrectly, and eventually cause an oops."}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-11-05T09:15:04.741Z"}}}, "cveMetadata": {"cveId": "CVE-2024-26751", "state": "PUBLISHED", "dateUpdated": "2024-11-05T09:15:04.741Z", "dateReserved": "2024-02-19T14:20:24.169Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-04-03T17:00:36.523Z", "assignerShortName": "Linux"}, "dataVersion": "5.1"}