CVE-2024-56684

In the Linux kernel, the following vulnerability has been resolved:

mailbox: mtk-cmdq: fix wrong use of sizeof in cmdq_get_clocks()

It should be size of the struct clk_bulk_data, not data pointer pass to devm_kcalloc().

This flaw poses no security risk to Red Hat Enterprise Linux because the problematic code in the MediaTek CMDQ mailbox driver was introduced in upstream kernel versions newer than those maintained in Red Hat products. Additionally, this driver specifically supports specialized MediaTek SoC hardware rather than typical enterprise server platforms. Therefore, supported Red Hat kernel distributions do not include the vulnerable functionality and remain unaffected.