CVE-2024-53163

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-53163
In the Linux kernel, the following vulnerability has been resolved: crypto: qat/qat_420xx - fix off by one in uof_get_name() This is called from uof_get_name_420xx() where "num_objs" is the ARRAY_SIZE() of fw_objs[]. The > needs to be >= to prevent an out of bounds access.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/91eef1ad75f03d37dba926b73f9dd6f058bc4d58 Patch
https://git.kernel.org/stable/c/93a11608fb3720e1bc2b19a2649ac2b49cca1921 Patch
https://git.kernel.org/stable/c/c23661a36eea840b657e485d48ed88b246da1bb8 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

06 Mar 2025, 12:42

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: crypto: qat/qat_420xx - arreglado por uno en uof_get_name() Esto se llama desde uof_get_name_420xx() donde "num_objs" es ARRAY_SIZE() de fw_objs[]. El > debe ser >= para evitar un acceso fuera de los límites.
CWE CWE-193
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux linux Kernel
Linux
References () https://git.kernel.org/stable/c/91eef1ad75f03d37dba926b73f9dd6f058bc4d58 - () https://git.kernel.org/stable/c/91eef1ad75f03d37dba926b73f9dd6f058bc4d58 - Patch
References () https://git.kernel.org/stable/c/93a11608fb3720e1bc2b19a2649ac2b49cca1921 - () https://git.kernel.org/stable/c/93a11608fb3720e1bc2b19a2649ac2b49cca1921 - Patch
References () https://git.kernel.org/stable/c/c23661a36eea840b657e485d48ed88b246da1bb8 - () https://git.kernel.org/stable/c/c23661a36eea840b657e485d48ed88b246da1bb8 - Patch

24 Dec 2024, 12:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-12-24 12:15

Updated : 2025-03-06 12:42

NVD link : CVE-2024-53163

Mitre link : CVE-2024-53163

CVE.ORG link : CVE-2024-53163

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-193

Off-by-one Error