CVE-2024-53192

CVE-2024-53192 affects the Linux kernel’s Loongson2 clock framework. A memory corruption risk exists in the flexible array member hws of struct clk_hw_onecell_data when allocating clks_num elements but not updating clp->clk_data.num accordingly. The code allocates clp with devm_kzalloc(dev, st...