CVE-2024-43852
Last modified
CVE-2024-43852 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. In the Linux kernel, the following vulnerability has been resolved: hwmon: (ltc2991) re-order conditions to fix off by one bug LTC2991_T_INT_CH_NR is 4. The st->temp_en[] array has LTC2991_MAX_CHANNEL (4) elements. EPSS estimates a 0.20% chance of exploitation in the next 30 days.
Description
In the Linux kernel, the following vulnerability has been resolved: hwmon: (ltc2991) re-order conditions to fix off by one bug LTC2991_T_INT_CH_NR is 4. The st->temp_en[] array has LTC2991_MAX_CHANNEL (4) elements. Thus if "channel" is equal to LTC2991_T_INT_CH_NR then we have read one element beyond the end of the array. Flip the conditions around so that we check if "channel" is valid before using it as an array index.
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 6.7, < 6.10.3 |
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2024-43852?
How severe is CVE-2024-43852?
How do I fix CVE-2024-43852?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-43847In the Linux kernel, the following vulnerability has been re…8.8
- CVE-2024-43848In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2024-43849In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2024-4385The Envo Extra plugin for WordPress is vulnerable to Stored …5.4
- CVE-2024-43850In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2024-43851In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2024-43853In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2024-43854In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2024-43855In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2024-43856In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2024-43857In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2024-43858In the Linux kernel, the following vulnerability has been re…7.8
Are you affected by CVE-2024-43852?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST