CVE-2024-57953

Summary

CVE-2024-57953: A vulnerability affecting the Linux kernel has been addressed. In the 'rtc' subsystem, specifically the 'tps6594' driver, a integer overflow issue was identified. The problem stems from a multiplication operation in 'tps6594_rtc_set_offset()' where the 'offset' variable, of type 'long', is multiplied by 'TICKS_PER_HOUR'. On 32-bit systems, 'long' can only hold numbers up to approximately two billion, while 'TICKS_PER_HOUR' is a much larger number, leading to an integer overflow. To mitigate this, it is recommended to change the type of 'TICKS_PER_HOUR' to 'long long' to accommodate its large value.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.