In the Linux kernel, the following vulnerability has been resolved:
rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read
The nvmem interface supports variable buffer sizes, while the regmap interface operates with fixed-size storage. If an nvmem client uses a buffer size less than 4 bytes, regmap_read will write out of bounds as it expects the buffer to point at an unsigned int.
Fix this by using an intermediary unsigned int to hold the value.
[
{
"digest": {
"length": 151.0,
"function_hash": "265983811577715537054285100258075324615"
},
"id": "CVE-2024-58069-0f5edd6b",
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c72b7a474d3f445bf0c5bcf8ffed332c78eb28a1",
"target": {
"file": "drivers/rtc/rtc-pcf85063.c",
"function": "pcf85063_nvmem_read"
}
},
{
"digest": {
"line_hashes": [
"309883070280875013774384119095651087599",
"188997596209243889554317166445134982056",
"197762508818969386329641001234425685978",
"46027427655197744104522718313759044083"
],
"threshold": 0.9
},
"id": "CVE-2024-58069-1ccf8f7b",
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@21cd59fcb9952eb7505da2bdfc1eb9c619df3ff4",
"target": {
"file": "drivers/rtc/rtc-pcf85063.c"
}
},
{
"digest": {
"length": 151.0,
"function_hash": "265983811577715537054285100258075324615"
},
"id": "CVE-2024-58069-24642335",
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@517aedb365f2c94e2d7e0b908ac7127df76203a1",
"target": {
"file": "drivers/rtc/rtc-pcf85063.c",
"function": "pcf85063_nvmem_read"
}
},
{
"digest": {
"line_hashes": [
"309883070280875013774384119095651087599",
"188997596209243889554317166445134982056",
"197762508818969386329641001234425685978",
"46027427655197744104522718313759044083"
],
"threshold": 0.9
},
"id": "CVE-2024-58069-2b85043a",
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e5e06455760f2995b16a176033909347929d1128",
"target": {
"file": "drivers/rtc/rtc-pcf85063.c"
}
},
{
"digest": {
"line_hashes": [
"309883070280875013774384119095651087599",
"188997596209243889554317166445134982056",
"197762508818969386329641001234425685978",
"46027427655197744104522718313759044083"
],
"threshold": 0.9
},
"id": "CVE-2024-58069-513d29e0",
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c72b7a474d3f445bf0c5bcf8ffed332c78eb28a1",
"target": {
"file": "drivers/rtc/rtc-pcf85063.c"
}
},
{
"digest": {
"length": 151.0,
"function_hash": "265983811577715537054285100258075324615"
},
"id": "CVE-2024-58069-5363c3e7",
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6f2a8ca9a0a38589f52a7f0fb9425b9ba987ae7c",
"target": {
"file": "drivers/rtc/rtc-pcf85063.c",
"function": "pcf85063_nvmem_read"
}
},
{
"digest": {
"line_hashes": [
"309883070280875013774384119095651087599",
"188997596209243889554317166445134982056",
"197762508818969386329641001234425685978",
"46027427655197744104522718313759044083"
],
"threshold": 0.9
},
"id": "CVE-2024-58069-59f8a82a",
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3ab8c5ed4f84fa20cd16794fe8dc31f633fbc70c",
"target": {
"file": "drivers/rtc/rtc-pcf85063.c"
}
},
{
"digest": {
"length": 151.0,
"function_hash": "265983811577715537054285100258075324615"
},
"id": "CVE-2024-58069-5ca0e7f8",
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3ab8c5ed4f84fa20cd16794fe8dc31f633fbc70c",
"target": {
"file": "drivers/rtc/rtc-pcf85063.c",
"function": "pcf85063_nvmem_read"
}
},
{
"digest": {
"line_hashes": [
"309883070280875013774384119095651087599",
"188997596209243889554317166445134982056",
"197762508818969386329641001234425685978",
"46027427655197744104522718313759044083"
],
"threshold": 0.9
},
"id": "CVE-2024-58069-64ddeec9",
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6f2a8ca9a0a38589f52a7f0fb9425b9ba987ae7c",
"target": {
"file": "drivers/rtc/rtc-pcf85063.c"
}
},
{
"digest": {
"length": 151.0,
"function_hash": "265983811577715537054285100258075324615"
},
"id": "CVE-2024-58069-6944545b",
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@21cd59fcb9952eb7505da2bdfc1eb9c619df3ff4",
"target": {
"file": "drivers/rtc/rtc-pcf85063.c",
"function": "pcf85063_nvmem_read"
}
},
{
"digest": {
"line_hashes": [
"309883070280875013774384119095651087599",
"188997596209243889554317166445134982056",
"197762508818969386329641001234425685978",
"46027427655197744104522718313759044083"
],
"threshold": 0.9
},
"id": "CVE-2024-58069-7a3f909f",
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e5536677da803ed54a29a446515c28dce7d3d574",
"target": {
"file": "drivers/rtc/rtc-pcf85063.c"
}
},
{
"digest": {
"line_hashes": [
"309883070280875013774384119095651087599",
"188997596209243889554317166445134982056",
"197762508818969386329641001234425685978",
"46027427655197744104522718313759044083"
],
"threshold": 0.9
},
"id": "CVE-2024-58069-8611ad00",
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9adefa7b9559d0f21034a5d5ec1b55840c9348b9",
"target": {
"file": "drivers/rtc/rtc-pcf85063.c"
}
},
{
"digest": {
"line_hashes": [
"309883070280875013774384119095651087599",
"188997596209243889554317166445134982056",
"197762508818969386329641001234425685978",
"46027427655197744104522718313759044083"
],
"threshold": 0.9
},
"id": "CVE-2024-58069-a0a8669c",
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@517aedb365f2c94e2d7e0b908ac7127df76203a1",
"target": {
"file": "drivers/rtc/rtc-pcf85063.c"
}
},
{
"digest": {
"length": 151.0,
"function_hash": "265983811577715537054285100258075324615"
},
"id": "CVE-2024-58069-e2e330c1",
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e5536677da803ed54a29a446515c28dce7d3d574",
"target": {
"file": "drivers/rtc/rtc-pcf85063.c",
"function": "pcf85063_nvmem_read"
}
},
{
"digest": {
"length": 151.0,
"function_hash": "265983811577715537054285100258075324615"
},
"id": "CVE-2024-58069-f5e7f6ad",
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e5e06455760f2995b16a176033909347929d1128",
"target": {
"file": "drivers/rtc/rtc-pcf85063.c",
"function": "pcf85063_nvmem_read"
}
},
{
"digest": {
"length": 151.0,
"function_hash": "265983811577715537054285100258075324615"
},
"id": "CVE-2024-58069-f7d8b4df",
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9adefa7b9559d0f21034a5d5ec1b55840c9348b9",
"target": {
"file": "drivers/rtc/rtc-pcf85063.c",
"function": "pcf85063_nvmem_read"
}
}
]