#VU100155 Input validation error in Linux kernel - CVE-2024-50181

Vulnerability identifier: #VU100155

Vulnerability risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-50181

CWE-ID: CWE-20

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Linux kernel
Operating systems & Components / Operating system

Vendor: Linux Foundation

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the imx7d_clocks_init() function in drivers/clk/imx/clk-imx7d.c. A local user can perform a denial of service (DoS) attack.

Mitigation
Install update from vendor's website.

Vulnerable software versions

Linux kernel: All versions

---

External links
https://git.kernel.org/stable/c/b677b94a9193ec7b6607bd1255172ae59174a382
https://git.kernel.org/stable/c/d18dc8e14b9c794f58dae1577ccb2ab84a4a1b11
https://git.kernel.org/stable/c/11ceb17e6f07cc30410f3a6276cddda248a9b863
https://git.kernel.org/stable/c/339273a9ddfe7632b717c2e13e81cbd5d383e1ff
https://git.kernel.org/stable/c/94f6cdc837e38371324cee97dfd2ef1a99a82c98
https://git.kernel.org/stable/c/a54c441b46a0745683c2eef5a359d22856d27323

---

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.