CVE Database›Document archive›CVE-2024-26599

CVE-2024-26599

kernel: pwm: Fix out-of-bounds access in of_pwm_single_xlate()

Loading…

Severity

Moderate

Red Hat Product Security

5.1

CVSS 3.1

Review impact separately from score.

Published · February 23, 2024

Updated · November 21, 2025

Description

A flaw was found in the Linux kernel due to an out-of-bounds access issue in the of_pwm_single_xlate() function within the drivers/pwm/core.c file. This issue occurs because of incorrect indexing of arguments (args->args[2]) when args->args_count == 2, leading to potential memory corruption.

Statement

The CVE-2024-26599 vulnerability in the Linux kernel is assessed as a Moderate severity due to its potential impact on system stability and security. The issue stems from an out-of-bounds access in the of_pwm_single_xlate() function within drivers/pwm/core.c. When args->args_count == 2, accessing args->args[2] improperly attempts to retrieve data beyond the allocated memory space, leading to memory corruption. While exploitation requires specific conditions and knowledge of system configuration, successful attacks could result in denial of service or unauthorized data exposure.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is currently available for this vulnerability. Make sure to perform the updates as they become available.

CVSS / CWE

CVSS 3.1 · 5.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

CWE-125 · Out-of-bounds Read