Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-41028
HistoryJul 29, 2024 - 2:31 p.m.

CVE-2024-41028 platform/x86: toshiba_acpi: Fix array out-of-bounds access

2024-07-2914:31:44
Linux
github.com
2
linux kernel
vulnerability
toshiba acpi

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

platform/x86: toshiba_acpi: Fix array out-of-bounds access

In order to use toshiba_dmi_quirks[] together with the standard DMI
matching functions, it must be terminated by a empty entry.

Since this entry is missing, an array out-of-bounds access occurs
every time the quirk list is processed.

Fix this by adding the terminating empty entry.

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial