Vulnerability identifier: #VU91100

Vulnerability risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2024-26702

CWE-ID: CWE-125

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Linux kernel
Operating systems & Components / Operating system

Vendor: Linux Foundation

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to an out-of-bounds read error within the rm3100_common_probe() function in drivers/iio/magnetometer/rm3100-core.c. A local user can perform a denial of service (DoS) attack.

Mitigation
Install update from vendor's website.

Vulnerable software versions

Linux kernel:

---

External links
http://git.kernel.org/stable/c/7200170e88e3ec54d9e9c63f07514c3cead11481
http://git.kernel.org/stable/c/36a49290d7e6d554020057a409747a092b1d3b56
http://git.kernel.org/stable/c/8d5838a473e8e6d812257c69745f5920e4924a60
http://git.kernel.org/stable/c/176256ff8abff29335ecff905a09fb49e8dcf513
http://git.kernel.org/stable/c/1d8c67e94e9e977603473a543d4f322cf2c4aa01
http://git.kernel.org/stable/c/57d05dbbcd0b3dc0c252103b43012eef5d6430d1
http://git.kernel.org/stable/c/792595bab4925aa06532a14dd256db523eb4fa5e

---

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.