CVE-2024-26730

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-26730
In the Linux kernel, the following vulnerability has been resolved: hwmon: (nct6775) Fix access to temperature configuration registers The number of temperature configuration registers does not always match the total number of temperature registers. This can result in access errors reported if KASAN is enabled. BUG: KASAN: global-out-of-bounds in nct6775_probe+0x5654/0x6fe9 nct6775_core

7.0 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.0 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/c196387820c9214c5ceaff56d77303c82514b8b1 Patch
https://git.kernel.org/stable/c/d56e460e19ea8382f813eb489730248ec8d7eb73 Patch
https://git.kernel.org/stable/c/f006c45a3ea424f8f6c8e4b9283bc245ce2a4d0f Patch
https://git.kernel.org/stable/c/c196387820c9214c5ceaff56d77303c82514b8b1 Patch
https://git.kernel.org/stable/c/d56e460e19ea8382f813eb489730248ec8d7eb73 Patch
https://git.kernel.org/stable/c/f006c45a3ea424f8f6c8e4b9283bc245ce2a4d0f Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.6.19:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc5:*:*:*:*:*:*
History

17 Mar 2025, 16:02

Type Values Removed Values Added
CWE CWE-787
CPE cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.6.19:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc4:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.0
First Time Linux linux Kernel
Linux
References () https://git.kernel.org/stable/c/c196387820c9214c5ceaff56d77303c82514b8b1 - () https://git.kernel.org/stable/c/c196387820c9214c5ceaff56d77303c82514b8b1 - Patch
References () https://git.kernel.org/stable/c/d56e460e19ea8382f813eb489730248ec8d7eb73 - () https://git.kernel.org/stable/c/d56e460e19ea8382f813eb489730248ec8d7eb73 - Patch
References () https://git.kernel.org/stable/c/f006c45a3ea424f8f6c8e4b9283bc245ce2a4d0f - () https://git.kernel.org/stable/c/f006c45a3ea424f8f6c8e4b9283bc245ce2a4d0f - Patch

21 Nov 2024, 09:02

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux se ha resuelto la siguiente vulnerabilidad: hwmon: (nct6775) Arreglar el acceso a los registros de configuración de temperatura El número de registros de configuración de temperatura no siempre coincide con el número total de registros de temperatura. Esto puede resultar en errores de acceso reportados si KASAN está habilitado. ERROR: KASAN: global fuera de los límites en nct6775_probe+0x5654/0x6fe9 nct6775_core
References () https://git.kernel.org/stable/c/c196387820c9214c5ceaff56d77303c82514b8b1 - () https://git.kernel.org/stable/c/c196387820c9214c5ceaff56d77303c82514b8b1 -
References () https://git.kernel.org/stable/c/d56e460e19ea8382f813eb489730248ec8d7eb73 - () https://git.kernel.org/stable/c/d56e460e19ea8382f813eb489730248ec8d7eb73 -
References () https://git.kernel.org/stable/c/f006c45a3ea424f8f6c8e4b9283bc245ce2a4d0f - () https://git.kernel.org/stable/c/f006c45a3ea424f8f6c8e4b9283bc245ce2a4d0f -

03 Apr 2024, 17:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-04-03 17:15

Updated : 2025-03-17 16:02

NVD link : CVE-2024-26730

Mitre link : CVE-2024-26730

CVE.ORG link : CVE-2024-26730

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-787

Out-of-bounds Write