🛡️ CVE-2024-26965 — debian-linux

🟠 CVSS 7.3 — High ✅ No Known Exploit CWE-787 NVD

7.3

CVSS Score

0 Low4 Medium7 High9 Critical10

Description

clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays

In the Linux kernel, the following vulnerability has been resolved:

clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays

The frequency table arrays are supposed to be terminated with an

empty element. Add such entry to the end of the arrays where it

is missing in order to avoid possible out-of-bound access when

the table is traversed by functions like qcom_find_freq() or

qcom_find_freq_floor().

Only compile tested.

How this vulnerability can be exploited

This issue can be reached with local access to the system, attack complexity is low, an attacker needs low-level privileges on the target. No user interaction is required. The scope is unchanged, so the impact stays within the vulnerable component. Rated impact: confidentiality high, integrity low, availability high.

Weakness class

CVE-2024-26965 is classified as CWE-787: Out-of-bounds Write. Data is written past the end or before the start of a buffer, corrupting whatever is stored there.

Affected software

CVE-2024-26965 is recorded against 3 packages.

debian-linux
kernel (from 6.8.0 up to 6.8.3)
linux-kernel (from 6.8 up to 6.8.3)

Timeline and source

Published on 1 May 2024 and last revised on 4 August 2026. No public exploit is currently recorded for this entry. A vendor advisory or fix has been published. Record sourced from NVD.

References

git.kernel.org
git.kernel.org
git.kernel.org
git.kernel.org
git.kernel.org
git.kernel.org
git.kernel.org
git.kernel.org
git.kernel.org
git.kernel.org
git.kernel.org
git.kernel.org
git.kernel.org
git.kernel.org
git.kernel.org

CVE-2024-26965 on other distributions

Each distribution ships its own build and its own fixed version. Pick the one you run:

BellSoft Debian Ubuntu

Details

Severity HIGH

CVSS Score 7.3

CVSS Vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H

CWE CWE-787

Public Exploit ✅ No

Source NVD

Published 2024-05-01

Updated 2026-08-12

Modified 2026-08-04

Fix URL https://git.kernel.org/stable/c/3ff4a0f6a8f0ad4b4ee9e908bdfc3cacb7be4060

Affected Packages

Software	From version	Fixed in
debian-linux	—	—
kernel	6.8.0	6.8.3
linux-kernel	6.8	6.8.3

References

Patch https://git.kernel.org/stable/c/3ff4a0f6a8f0ad4b4ee9e908bdfc3cacb7be4060

Patch https://git.kernel.org/stable/c/537040c257ab4cd0673fbae048f3940c8ea2e589

Patch https://git.kernel.org/stable/c/7e9926fef71e514b4a8ea9d11d5a84d52b181362

Patch https://git.kernel.org/stable/c/86bf75d9158f511db7530bc82a84b19a5134d089

Patch https://git.kernel.org/stable/c/8f562f3b25177c2055b20fd8cf000496f6fa9194

Patch https://git.kernel.org/stable/c/99740c4791dc8019b0d758c5389ca6d1c0604d95

Patch https://git.kernel.org/stable/c/ae99e199037c580b7350bfa3596f447a53bcf01f

Patch https://git.kernel.org/stable/c/ca2cf98d46748373e830a13d85d215d64a2d9bf2

Patch https://git.kernel.org/stable/c/e2c02a85bf53ae86d79b5fccf0a75ac0b78e0c96

Patch https://git.kernel.org/stable/c/3ff4a0f6a8f0ad4b4ee9e908bdfc3cacb7be4060

Patch https://git.kernel.org/stable/c/537040c257ab4cd0673fbae048f3940c8ea2e589

Patch https://git.kernel.org/stable/c/7e9926fef71e514b4a8ea9d11d5a84d52b181362

Patch https://git.kernel.org/stable/c/86bf75d9158f511db7530bc82a84b19a5134d089

Patch https://git.kernel.org/stable/c/8f562f3b25177c2055b20fd8cf000496f6fa9194

Patch https://git.kernel.org/stable/c/99740c4791dc8019b0d758c5389ca6d1c0604d95

Patch https://git.kernel.org/stable/c/ae99e199037c580b7350bfa3596f447a53bcf01f

Patch https://git.kernel.org/stable/c/ca2cf98d46748373e830a13d85d215d64a2d9bf2

Patch https://git.kernel.org/stable/c/e2c02a85bf53ae86d79b5fccf0a75ac0b78e0c96

Mailing List, Third Party Advisory https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html

Mailing List, Third Party Advisory https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html

🔗 NVD 🔗 Mitre ✅ Fix / Advisory

Similar Threats

Site Security Check

Is debian-linux part of your stack?

CVE-2024-26965 is rated CVSS 7.3 High. BotEraser scans your installation against known CVE records and tells you whether this vulnerability applies to the versions you actually run.

Scan My Site Free →

No credit card required · Results in minutes

ⓘ Data Notice: The information presented above has been compiled from publicly available internet sources. Boteraser aggregates this data solely for informational purposes and does not independently classify, evaluate, or endorse any findings about the vulnerabilities listed. The accuracy and completeness of this information is the sole responsibility of the original publishers. Boteraser and its operators accept no liability for any decisions made based on this data.