Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2024-35992

phy: marvell: a3700-comphy: Fix out of bounds read

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: phy: marvell: a3700-comphy: Fix out of bounds read There is an out of bounds read access of 'gbe_phy_init_fix[fix_idx].addr' every iteration after 'fix_idx' reaches 'ARRAY_SIZE(gbe_phy_init_fix)'. Make sure 'gbe_phy_init[addr]' is used when all elements of 'gbe_phy_init_fix' array are handled. Found by Linux Verification Center (linuxtesting.org) with SVACE.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 934337080c6c59b75db76b180b509f218640ad48 to < 976df695f579bbb2914114b4e9974fe4ed1eb813affected
  • 934337080c6c59b75db76b180b509f218640ad48 to < 610f175d2e16fb2436ba7974b990563002c20d07affected
  • 934337080c6c59b75db76b180b509f218640ad48 to < 40406dfbc060503d2e0a9e637e98493c54997b3daffected
  • 934337080c6c59b75db76b180b509f218640ad48 to < e4308bc22b9d46cf33165c9dfaeebcf29cd56f04affected

Linux Linux

Default version status: affected

  • 5.18affected
  • 0 to < 5.18unaffected
  • 6.1.90 to ≤ 6.1.*unaffected
  • 6.6.30 to ≤ 6.6.*unaffected
  • 6.8.9 to ≤ 6.8.*unaffected
  • 6.9 to ≤ *unaffected

References