Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2024-41028

platform/x86: toshiba_acpi: Fix array out-of-bounds access

Description

In the Linux kernel, the following vulnerability has been resolved: platform/x86: toshiba_acpi: Fix array out-of-bounds access In order to use toshiba_dmi_quirks[] together with the standard DMI matching functions, it must be terminated by a empty entry. Since this entry is missing, an array out-of-bounds access occurs every time the quirk list is processed. Fix this by adding the terminating empty entry.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 3cb1f40dfdc3b9f5449076c96b4e2523139f5cd0 to < e030aa6c972641cb069086a8c7a0f747653e472aaffected
  • 3cb1f40dfdc3b9f5449076c96b4e2523139f5cd0 to < 639868f1cb87b683cf830353bbee0c4078202313affected
  • 3cb1f40dfdc3b9f5449076c96b4e2523139f5cd0 to < 0d71da43d6b7916d36cf1953d793da80433c50bfaffected
  • 3cb1f40dfdc3b9f5449076c96b4e2523139f5cd0 to < b6e02c6b0377d4339986e07aeb696c632cd392aaaffected

Linux Linux

Default version status: affected

  • 6.1affected
  • 0 to < 6.1unaffected
  • 6.1.100 to ≤ 6.1.*unaffected
  • 6.6.41 to ≤ 6.6.*unaffected
  • 6.9.10 to ≤ 6.9.*unaffected
  • 6.10 to ≤ *unaffected

References