CVE-2024-35992

Summary

CVE-2024-35992 is a vulnerability affecting the Linux kernel that has been addressed. This issue involves an out-of-bounds read in the 'phy: marvell: a3700-comphy' driver. Following the iteration where 'fix_idx' equals 'ARRAY_SIZE(gbe_phy_init_fix)', there is unauthorized access to 'gbe_phy_init_fix[fix_idx].addr'. To mitigate this risk, it is crucial to ensure proper usage of 'gbe_phy_init[addr]' when all elements in 'gbe_phy_init_fix' have been handled. This vulnerability was identified by Linux Verification Center (linuxtesting.org) using Sourcecode Analysis and Vulnerability Exploit (SVACE) tools.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.