CVE-2024-53192

Summary

CVE-2024-53192 is a vulnerability affecting the Linux kernel. It involves a potential buffer overflow in the flexible-array member access of the struct clk_hw_onecell_data. The issue arises due to the misconfiguration of the counter, which should be set to the maximum number of elements or fewer, but is instead set to exceed the number of elements in the flexible array. This error occurs during the allocation of heap space via devm_kzalloc(), leading to memory corruption at runtime. To mitigate this issue, it is necessary to set clp->clk_data.num to clks_num or less, to ensure that the flexible array is not overwritten.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.