CVE-2024-57953

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

rtc: tps6594: Fix integer overflow on 32bit systems

The problem is this multiply in tps6594_rtc_set_offset()

tmp = offset * TICKS_PER_HOUR;

The "tmp" variable is an s64 but "offset" is a long in the (-277774)-277774 range. On 32bit systems a long can hold numbers up to approximately two billion. The number of TICKS_PER_HOUR is really large, (32768 * 3600) or roughly a hundred million. When you start multiplying by a hundred million it doesn't take long to overflow the two billion mark.

Probably the safest way to fix this is to change the type of TICKS_PER_HOUR to long long because it's such a large number.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published
Feb 27, 2025
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-579547.5Permission verification vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service cCVE-2024-579557.5Arbitrary write vulnerability in the Gallery module Impact: Successful exploitation of this vulnerability may affect service confidentialitCVE-2024-579567.5Out-of-bounds read vulnerability in the interpreter string module Impact: Successful exploitation of this vulnerability may affect availabilCVE-2024-579577.5Vulnerability of improper log information control in the UI framework module Impact: Successful exploitation of this vulnerability may affecCVE-2024-579589.1Out-of-bounds array read vulnerability in the FFRT module Impact: Successful exploitation of this vulnerability may cause features to perforCVE-2024-579599.8Use-After-Free (UAF) vulnerability in the display module Impact: Successful exploitation of this vulnerability may cause features to performCVE-2024-57966.4The Infinite theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘project_url’ parameter in all versions up to, and incCVE-2024-579607.5Input verification vulnerability in the ExternalStorageProvider module Impact: Successful exploitation of this vulnerability may affect servCVE-2024-579619.8Out-of-bounds write vulnerability in the emcom module Impact: Successful exploitation of this vulnerability may cause features to perform abCVE-2024-579627.5Vulnerability of incomplete verification information in the VPN service module Impact: Successful exploitation of this vulnerability may affCVE-2024-579637.3Insecure Loading of Dynamic Link Libraries have been discovered in USB-CONVERTERCABLE DRIVER, which could allow local attackers to potentialCVE-2024-579647.3Insecure Loading of Dynamic Link Libraries have been discovered in HVAC Energy Saving Program, which could allow local attackers to potentia
CVE-2024-57953: Medium severity, CVSS 5.5 | Vulnix