Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2024-53163

crypto: qat/qat_420xx - fix off by one in uof_get_name()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: qat/qat_420xx - fix off by one in uof_get_name() This is called from uof_get_name_420xx() where "num_objs" is the ARRAY_SIZE() of fw_objs[]. The > needs to be >= to prevent an out of bounds access.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • fcf60f4bcf54952cc14d14178c358be222dbeb43 to < c23661a36eea840b657e485d48ed88b246da1bb8affected
  • fcf60f4bcf54952cc14d14178c358be222dbeb43 to < 91eef1ad75f03d37dba926b73f9dd6f058bc4d58affected
  • fcf60f4bcf54952cc14d14178c358be222dbeb43 to < 93a11608fb3720e1bc2b19a2649ac2b49cca1921affected

Linux Linux

Default version status: affected

  • 6.8affected
  • 0 to < 6.8unaffected
  • 6.11.11 to ≤ 6.11.*unaffected
  • 6.12.2 to ≤ 6.12.*unaffected
  • 6.13 to ≤ *unaffected

References