Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2024-53162

crypto: qat/qat_4xxx - fix off by one in uof_get_name()

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: qat/qat_4xxx - fix off by one in uof_get_name() The fw_objs[] array has "num_objs" elements so the > needs to be >= to prevent an out of bounds read.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 10484c647af6b1952d1675e83be9cc976cdb6a96 to < 05c9a7a5344425860202a8f3efea4d8ed2d10edbaffected
  • 10484c647af6b1952d1675e83be9cc976cdb6a96 to < e69d2845aaa080960f38761f78fd25aa856620c6affected
  • 10484c647af6b1952d1675e83be9cc976cdb6a96 to < 700852528fc5295897d6089eea0656d67f9b9d88affected
  • 10484c647af6b1952d1675e83be9cc976cdb6a96 to < 475b5098043eef6e72751aadeab687992a5b63d1affected

Linux Linux

Default version status: affected

  • 6.5affected
  • 0 to < 6.5unaffected
  • 6.6.64 to ≤ 6.6.*unaffected
  • 6.11.11 to ≤ 6.11.*unaffected
  • 6.12.2 to ≤ 6.12.*unaffected
  • 6.13 to ≤ *unaffected

References