CVE-2024-26971 is a vulnerability in the Linux kernel's QCOM GCC-IPQ5018 clock driver, specifically affecting the handling of frequency table arrays. The absence of a proper terminating empty element in these arrays could lead to out-of-bounds access when functions like qcom_find_freq() or qcom_find_freq_floor() traverse them. Rated with a CVSS score of 5.5 (Medium), this vulnerability has a local attack vector, low attack complexity, and requires low privileges, potentially leading to high availability impact. There is no known active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 6.6, < 6.6.24CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 6.7, < 6.7.12CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 6.8, < 6.8.3CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.