CVE-2024-35992

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

phy: marvell: a3700-comphy: Fix out of bounds read

There is an out of bounds read access of 'gbe_phy_init_fix[fix_idx].addr' every iteration after 'fix_idx' reaches 'ARRAY_SIZE(gbe_phy_init_fix)'.

Make sure 'gbe_phy_init[addr]' is used when all elements of 'gbe_phy_init_fix' array are handled.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-125

Affected software

VendorProductVersions
LinuxLinux>= 934337080c6c59b75db76b180b509f218640ad48, < 976df695f579bbb2914114b4e9974fe4ed1eb813; >= 934337080c6c59b75db76b180b509f218640ad48, < 610f175d2e16fb2436ba7974b990563002c20d07; >= 934337080c6c59b75db76b180b509f218640ad48, < 40406dfbc060503d2e0a9e637e98493c54997b3d; >= 934337080c6c59b75db76b180b509f218640ad48, < e4308bc22b9d46cf33165c9dfaeebcf29cd56f04
LinuxLinux5.18

References

Timeline

Published
May 20, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-359935.5In the Linux kernel, the following vulnerability has been resolved: mm: turn folio_test_hugetlb into a PageType The current folio_test_hugCVE-2024-359945.5In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: uefisecapp: Fix memory related IO errors and crashes ICVE-2024-359955.5In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Use access_width over bit_width for system memory accesses CVE-2024-359965.5In the Linux kernel, the following vulnerability has been resolved: cpu: Re-enable CPU mitigations by default for !X86 architectures RenamCVE-2024-359975.5In the Linux kernel, the following vulnerability has been resolved: HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up The CVE-2024-359985.5In the Linux kernel, the following vulnerability has been resolved: smb3: fix lock ordering potential deadlock in cifs_sync_mid_result CovCVE-2024-359997.5In the Linux kernel, the following vulnerability has been resolved: smb3: missing lock when picking channel Coverity spotted a place whereCVE-2024-36006.1The Poll Maker – Best WordPress Poll Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting due to a missing capability chCVE-2024-360005.5In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix missing hugetlb_lock for resv uncharge There is a receCVE-2024-360017.8In the Linux kernel, the following vulnerability has been resolved: netfs: Fix the pre-flush when appending to a file in writethrough mode CVE-2024-360025.5In the Linux kernel, the following vulnerability has been resolved: dpll: fix dpll_pin_on_pin_register() for multiple parent pins In scenaCVE-2024-360035.5In the Linux kernel, the following vulnerability has been resolved: ice: fix LAG and VF lock dependency in ice_reset_vf() 9f74a3dfcf83 ("i