Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: clk: qcom: gcc-ipq5018: fix terminating of frequency table arrays The frequency table arrays are supposed to be terminated with an empty element. Add such an entry to the end of the arrays where it is missing, in order to avoid...

CVE-2024-26971 clk: qcom: gcc-ipq5018: fix terminating of frequency table arrays

In the Linux kernel, the following vulnerability has been resolved: clk: qcom: gcc-ipq5018: fix terminating of frequency table arrays The frequency table arrays are supposed to be terminated with an empty element. Add such entry to the end of the arrays where it is missing in order to avoid...

CVE-2024-26971

CVE-2024-26971 relates to the Linux kernel clock framework for Qualcomm IPQ5018 (clk: qcom: gcc-ipq5018). The issue is that frequency table arrays were not properly terminated with an empty element, which can lead to out-of-bounds access when components traverse the table (e.g., qcom_find_freq() ...