CVE-2024-35992 - phy: marvell: a3700-comphy: Fix out of bounds read

MEDIUM

phy: marvell: a3700-comphy: Fix out of bounds read

Published May 20, 2024

5.5

MEDIUM

CVSS 3.1

EPSS 0.21%

There is an out of bounds read access of 'gbe_phy_init_fix[fix_idx].addr' every iteration after 'fix_idx' reaches 'ARRAY_SIZE(gbe_phy_init_fix)'.

Make sure 'gbe_phy_init[addr]' is used when all elements of 'gbe_phy_init_fix' array are handled.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

unaffected

affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 6	kernel	Not affected	n/a
Red Hat Enterprise Linux 7	kernel	Not affected	n/a
Red Hat Enterprise Linux 7	kernel-rt	Not affected	n/a
Red Hat Enterprise Linux 8	kernel	Not affected	n/a
Red Hat Enterprise Linux 8	kernel-rt	Not affected	n/a
Red Hat Enterprise Linux 9	kernel	Not affected	n/a
Red Hat Enterprise Linux 9	kernel-rt	Not affected	n/a

Red Hat statement

The phy-mvebu-a3700-comphy module is not built in the kernel shipped in Red Hat Enterprise Linux, so it is not affected by this vulnerability.

Weaknesses (1)

CWE-125

Out-of-bounds Read

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2024-35992		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2281841		Issue Tracking
https://git.kernel.org/stable/c/40406dfbc060503d2e0a9e637e98493c54997b3d		Patch
https://git.kernel.org/stable/c/610f175d2e16fb2436ba7974b990563002c20d07		Patch
https://git.kernel.org/stable/c/976df695f579bbb2914114b4e9974fe4ed1eb813		Patch
https://git.kernel.org/stable/c/e4308bc22b9d46cf33165c9dfaeebcf29cd56f04		Patch
https://lore.kernel.org/linux-cve-announce/2024052020-CVE-2024-35992-2e88@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2024-35992
https://www.cve.org/CVERecord?id=CVE-2024-35992