Buffer Overflow Vulnerability in Linux Kernel Affects Multiple Variants

CVE-2024-57998

Summary

A buffer overflow has been identified in the Linux kernel related to the handling of frequency indexes in the device power management (OPP) subsystem. This issue arises when the function to read frequency values, specifically through indexed calls, does not adequately check the bounds of the frequency rates table. To mitigate this, an index check has been added within the assert function, ensuring that the access to the rates array remains within its defined limits. This enhancement is vital for safeguarding against potential unintentional memory access violations that could lead to system instability or exploitation.

References