CVE-2024-53162

CVSS 3.1 Score 7.1 of 10 (high)

Details

Published Dec 24, 2024
Updated: Mar 6, 2025
CWE ID 125

Summary

CVE-2024-53162 is a newly identified vulnerability in the Linux kernel. It affects the qat/qat_4xxx driver in crypto subsystem. The issue revolves around an off-by-one error in the function uof_get_name(). Specifically, the array fw_objs has "num_objs" elements, but the check for array bounds only considers the size as a limit for read operations, rather than a strict equality. This oversight could potentially result in an out-of-bounds read. The vulnerability has since been addressed in the Linux kernel.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share