CVE-2024-53163

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Dec 24, 2024
Updated: Mar 6, 2025
CWE ID 193

Summary

CVE-2024-53163 is a vulnerability in the Linux kernel's crypto module. Specifically, in the qat/qat_420xx driver, there is an issue with the uof_get_name() function in uof_get_name_420xx(). In this function, the array size of fw_objs[] is used to determine the index for an array access. However, the greater than (>) operator is used instead of greater than or equal to (>=), which can result in an out-of-bounds access if the number of objects is equal to the array size. This vulnerability has been resolved in the latest Linux kernel update.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share