CVE-2024-38631

2024-06-2413:53:23

redhat.com

access.redhat.com

cve-2024-38631

vulnerability

linux kernel

iio

adc

pac1934

accessing out of bounds

array index

average current

voltage measurements

sysfs

fake channels

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

In the Linux kernel, the following vulnerability has been resolved: iio: adc: PAC1934: fix accessing out of bounds array index Fix accessing out of bounds array index for average current and voltage measurements. The device itself has only 4 channels, but in sysfs there are “fake” channels for the average voltages and currents too.