CVE-2024-35992

A flaw was found in the Linux kernel’s phy-mvebu-a3700-comphy module. An out-of-bounds read in the comphygbephyinit function in the drivers/phy/marvell/phy-mvebu-a3700-comphy.c file can be triggered due to a missing check of an array size, resulting in a denial of service...

CVE-2024-35992 phy: marvell: a3700-comphy: Fix out of bounds read

In the Linux kernel, the following vulnerability has been resolved: phy: marvell: a3700-comphy: Fix out of bounds read There is an out of bounds read access of 'gbephyinitfixfixidx.addr' every iteration after 'fixidx' reaches 'ARRAYSIZEgbephyinitfix'. Make sure 'gbephyinitaddr' is used when all...