Description
In the Linux kernel, the following vulnerability has been resolved: ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate() The psc->div[] array has psc->num_div elements. These values come from when we call clk_hw_register_div(). It's adc_divisors and ARRAY_SIZE(adc_divisors)) and so on. So this condition needs to be >= instead of > to prevent an out of bounds read.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
9645ccc7bd7a16cd73c3be9dee70cd702b03be37 to < 7a5bd2fb92388c51d267f6ce57c40f1cca8af1e0affected9645ccc7bd7a16cd73c3be9dee70cd702b03be37 to < 66e78ade976dbd9bea09166aa8d66afc0963cde4affected9645ccc7bd7a16cd73c3be9dee70cd702b03be37 to < 27f493e141823db052586010c1532b70b164507caffected9645ccc7bd7a16cd73c3be9dee70cd702b03be37 to < ae59eaf36a1ad396e9f657ec9b8b52da6206ed5faffected9645ccc7bd7a16cd73c3be9dee70cd702b03be37 to < c7f06284a6427475e3df742215535ec3f6cd9662affected
Linux Linux
Default version status: affected
5.16affected0 to < 5.16unaffected6.1.113 to ≤ 6.1.*unaffected6.6.54 to ≤ 6.6.*unaffected6.10.13 to ≤ 6.10.*unaffected6.11.2 to ≤ 6.11.*unaffected6.12 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/7a5bd2fb92388c51d267f6ce57c40f1cca8af1e0 ↗
- https://git.kernel.org/stable/c/66e78ade976dbd9bea09166aa8d66afc0963cde4 ↗
- https://git.kernel.org/stable/c/27f493e141823db052586010c1532b70b164507c ↗
- https://git.kernel.org/stable/c/ae59eaf36a1ad396e9f657ec9b8b52da6206ed5f ↗
- https://git.kernel.org/stable/c/c7f06284a6427475e3df742215535ec3f6cd9662 ↗
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html ↗