CVE-2024-46859

Summary

CVE-2024-46859: A vulnerability has been identified and resolved in the Linux kernel's panasonic-laptop driver. The issue stems from an out-of-bounds access of the SINF array in various places within the code. Not all Panasonic laptops have the same number of SINF array entries, and some models may not have enough entries to support all AC+DC brightness settings and mute. To mitigate this issue, the code now checks that the SINF array has a minimum size sufficient for all AC+DC brightness entries before loading. Additionally, sysfs attributes are hidden when the SINF array does not contain an entry for that attribute, preventing out-of-bounds access. The probe() and resume() functions have also been updated with bounds checking to prevent accessing the array out of bounds.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.