CVE-2024-26730 - Vulnerability Details - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: hwmon: (nct6775) Fix access to temperature configuration registers The number of temperature configuration registers does not always match the total number of temperature registers. This can result in access errors reported if KASAN is enabled. BUG: KASAN: global-out-of-bounds in nct6775_probe+0x5654/0x6fe9 nct6775_core

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/c196387820c9214c5ceaff56d77303c82514b8b1
https://git.kernel.org/stable/c/d56e460e19ea8382f813eb489730248ec8d7eb73
https://git.kernel.org/stable/c/f006c45a3ea424f8f6c8e4b9283bc245ce2a4d0f
https://lore.kernel.org/linux-cve-announce/2024040358-CVE-2024-26730-4c35@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2024-26730
https://www.cve.org/CVERecord?id=CVE-2024-26730

History

Tue, 05 Nov 2024 10:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Wed, 11 Sep 2024 18:30:00 +0000

Type	Values Removed	Values Added
Metrics	ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Wed, 11 Sep 2024 13:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-04-03T17:00:18.186Z

Updated: 2024-12-19T08:46:02.146Z

Reserved: 2024-02-19T14:20:24.164Z

Link: CVE-2024-26730

Vulnrichment

Updated: 2024-08-02T00:14:12.970Z

NVD

Status : Awaiting Analysis

Published: 2024-04-03T17:15:50.873

Modified: 2024-11-21T09:02:56.220

Link: CVE-2024-26730

Redhat

Severity : Moderate

Publid Date: 2024-04-03T00:00:00Z

Links: CVE-2024-26730 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-26730", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-02-19T14:20:24.164Z", "datePublished": "2024-04-03T17:00:18.186Z", "dateUpdated": "2024-12-19T08:46:02.146Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-12-19T08:46:02.146Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nhwmon: (nct6775) Fix access to temperature configuration registers\n\nThe number of temperature configuration registers does\nnot always match the total number of temperature registers.\nThis can result in access errors reported if KASAN is enabled.\n\nBUG: KASAN: global-out-of-bounds in nct6775_probe+0x5654/0x6fe9 nct6775_core"}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/hwmon/nct6775-core.c"], "versions": [{"version": "b7f1f7b2523a6a4382f12fe953380b847b80e09d", "lessThan": "f006c45a3ea424f8f6c8e4b9283bc245ce2a4d0f", "status": "affected", "versionType": "git"}, {"version": "b7f1f7b2523a6a4382f12fe953380b847b80e09d", "lessThan": "c196387820c9214c5ceaff56d77303c82514b8b1", "status": "affected", "versionType": "git"}, {"version": "b7f1f7b2523a6a4382f12fe953380b847b80e09d", "lessThan": "d56e460e19ea8382f813eb489730248ec8d7eb73", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/hwmon/nct6775-core.c"], "versions": [{"version": "6.6", "status": "affected"}, {"version": "0", "lessThan": "6.6", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.19", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.7.7", "lessThanOrEqual": "6.7.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.8", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "references": [{"url": "https://git.kernel.org/stable/c/f006c45a3ea424f8f6c8e4b9283bc245ce2a4d0f"}, {"url": "https://git.kernel.org/stable/c/c196387820c9214c5ceaff56d77303c82514b8b1"}, {"url": "https://git.kernel.org/stable/c/d56e460e19ea8382f813eb489730248ec8d7eb73"}], "title": "hwmon: (nct6775) Fix access to temperature configuration registers", "x_generator": {"engine": "bippy-5f407fcff5a0"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T00:14:12.970Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/f006c45a3ea424f8f6c8e4b9283bc245ce2a4d0f", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/c196387820c9214c5ceaff56d77303c82514b8b1", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/d56e460e19ea8382f813eb489730248ec8d7eb73", "tags": ["x_transferred"]}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-26730", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-09-10T15:52:03.714243Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-11T17:33:21.224Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/f006c45a3ea424f8f6c8e4b9283bc245ce2a4d0f", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/c196387820c9214c5ceaff56d77303c82514b8b1", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/d56e460e19ea8382f813eb489730248ec8d7eb73", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T00:14:12.970Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-26730", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-09-10T15:52:03.714243Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-11T12:42:16.286Z"}}], "cna": {"title": "hwmon: (nct6775) Fix access to temperature configuration registers", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "b7f1f7b2523a6a4382f12fe953380b847b80e09d", "lessThan": "f006c45a3ea424f8f6c8e4b9283bc245ce2a4d0f", "versionType": "git"}, {"status": "affected", "version": "b7f1f7b2523a6a4382f12fe953380b847b80e09d", "lessThan": "c196387820c9214c5ceaff56d77303c82514b8b1", "versionType": "git"}, {"status": "affected", "version": "b7f1f7b2523a6a4382f12fe953380b847b80e09d", "lessThan": "d56e460e19ea8382f813eb489730248ec8d7eb73", "versionType": "git"}], "programFiles": ["drivers/hwmon/nct6775-core.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "6.6"}, {"status": "unaffected", "version": "0", "lessThan": "6.6", "versionType": "semver"}, {"status": "unaffected", "version": "6.6.19", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.7.7", "versionType": "semver", "lessThanOrEqual": "6.7.*"}, {"status": "unaffected", "version": "6.8", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/hwmon/nct6775-core.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/f006c45a3ea424f8f6c8e4b9283bc245ce2a4d0f"}, {"url": "https://git.kernel.org/stable/c/c196387820c9214c5ceaff56d77303c82514b8b1"}, {"url": "https://git.kernel.org/stable/c/d56e460e19ea8382f813eb489730248ec8d7eb73"}], "x_generator": {"engine": "bippy-5f407fcff5a0"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nhwmon: (nct6775) Fix access to temperature configuration registers\n\nThe number of temperature configuration registers does\nnot always match the total number of temperature registers.\nThis can result in access errors reported if KASAN is enabled.\n\nBUG: KASAN: global-out-of-bounds in nct6775_probe+0x5654/0x6fe9 nct6775_core"}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-12-19T08:46:02.146Z"}}}, "cveMetadata": {"cveId": "CVE-2024-26730", "state": "PUBLISHED", "dateUpdated": "2024-12-19T08:46:02.146Z", "dateReserved": "2024-02-19T14:20:24.164Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-04-03T17:00:18.186Z", "assignerShortName": "Linux"}, "dataVersion": "5.1"}

{"bugzilla": {"description": "kernel: hwmon: (nct6775) Fix access to temperature configuration registers", "id": "2273254", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2273254"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-125", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nhwmon: (nct6775) Fix access to temperature configuration registers\nThe number of temperature configuration registers does\nnot always match the total number of temperature registers.\nThis can result in access errors reported if KASAN is enabled.\nBUG: KASAN: global-out-of-bounds in nct6775_probe+0x5654/0x6fe9 nct6775_core", "A vulnerability was found in the Linux kernel. This issue involves mismatches between the number of temperature configuration registers and the total number of temperature registers that are accessed. This issue could lead to out-of-bounds memory access errors, causing memory corruption or crashes."], "name": "CVE-2024-26730", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2024-04-03T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2024-26730\nhttps://nvd.nist.gov/vuln/detail/CVE-2024-26730\nhttps://lore.kernel.org/linux-cve-announce/2024040358-CVE-2024-26730-4c35@gregkh/T"], "statement": "Red Hat Enterprise Linux 8 and 9 are not affected by this vulnerability.", "threat_severity": "Moderate", "upstream_fix": "kernel 6.6.19, kernel 6.7.7, kernel 6.8"}