In the Linux kernel, the following vulnerability has been resolved: gpio: davinci: Validate the obtained number of IRQs Value of pdata->gpio_unbanked is taken from Device Tree. In case of broken DT due to any error this value can be any. Without this value validation there can be out of chips->irqs array boundaries access in davinci_gpio_probe(). Validate the obtained nirq value so that it won't exceed the maximum number of IRQs per bank. Found by Linux Verification Center (linuxtesting.org) with SVACE.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity High

Privileges Required High

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

No data.

No data.

No data.

References
Link Providers
https://git.kernel.org/stable/c/2d83492259ad746b655f196cd5d1be4b3d0a3782 cve-icon cve-icon
https://git.kernel.org/stable/c/70b48899f3f23f98a52c5b1060aefbdc7ba7957b cve-icon cve-icon
https://git.kernel.org/stable/c/7aa9b96e9a73e4ec1771492d0527bd5fc5ef9164 cve-icon cve-icon
https://git.kernel.org/stable/c/89d7008af4945808677662a630643b5ea89c6e8d cve-icon cve-icon
https://git.kernel.org/stable/c/a8d78984fdc105bc1a38b73e98d32b1bc4222684 cve-icon cve-icon
https://git.kernel.org/stable/c/c542e51306d5f1eba3af84daa005826223382470 cve-icon cve-icon
https://git.kernel.org/stable/c/cd75721984337c38a12aeca33ba301d31ca4b3fd cve-icon cve-icon
https://git.kernel.org/stable/c/e44a83bf15c4db053ac6dfe96a23af184c9136d9 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024072906-CVE-2024-42092-8375@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-42092 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-42092 cve-icon
History

Tue, 05 Nov 2024 10:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Sat, 28 Sep 2024 02:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-20
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

 cvssV3_1

{'score': 4.1, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H'}

Thu, 12 Sep 2024 08:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 11 Sep 2024 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-07-29T17:35:01.209Z

Updated: 2024-11-05T09:37:15.189Z

Reserved: 2024-07-29T15:50:41.172Z

Link: CVE-2024-42092

cve-icon Vulnrichment

Updated: 2024-08-02T04:54:32.053Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2024-07-29T18:15:11.740

Modified: 2024-07-30T13:33:30.653

Link: CVE-2024-42092

cve-icon Redhat

Severity : Low

Publid Date: 2024-07-29T00:00:00Z

Links: CVE-2024-42092 - Bugzilla