CVE-2024-47686

ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()

HIGH

7.1

CVSS Score

Published: October 21, 2024 at 11:53 AM UTC

Updated: June 17, 2026 at 07:57 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.1

Exploit prediction

EPSS 0.2%

SSVC

No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate() The psc->div[] array has psc->num_div elements. These values come from when we call clk_hw_register_div(). It's adc_divisors and ARRAY_SIZE(adc_divisors)) and so on. So this condition needs to be >= instead of > to prevent an out of bounds read.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

5.16 ≤ v < 6.1.1135.16 ≤ v < 6.10.135.16 ≤ v < 6.11.25.16 ≤ v < 6.125.16 ≤ v < 6.6.546.11 ≤ v < 6.11.26.2 ≤ v < 6.6.546.7 ≤ v < 6.10.135.169645ccc7bd7a16cd73c3be9dee70cd702b03be37

Vendor states this is fixed in 27f493e141823db052586010c1532b70b164507c (fixed)

Vendor states this is fixed in 66e78ade976dbd9bea09166aa8d66afc0963cde4 (fixed)

Vendor states this is fixed in 7a5bd2fb92388c51d267f6ce57c40f1cca8af1e0 (fixed)

Vendor states this is fixed in ae59eaf36a1ad396e9f657ec9b8b52da6206ed5f (fixed)

Vendor states this is fixed in c7f06284a6427475e3df742215535ec3f6cd9662 (fixed)

Vendor states this is fixed in 5.16 (unaffected)

Vendor states this is fixed in 6.1.113 (unaffected)

Vendor states this is fixed in 6.10.13 (unaffected)

Vendor states this is fixed in 6.11.2 (unaffected)

Vendor states this is fixed in 6.12 (unaffected)

Vendor states this is fixed in 6.6.54 (unaffected)