Linux Kernel up to 6.11.10/6.12.1 qat_420xx uof_get_name fw_objs[] off-by-one

Summaryinfo

A vulnerability was found in Linux Kernel up to 6.11.10/6.12.1 and classified as problematic. This affects the function uof_get_name of the component qat_420xx. Executing a manipulation of the argument fw_objs[] can lead to off-by-one. This vulnerability appears as CVE-2024-53163. There is no available exploit. It is suggested to upgrade the affected component.

Detailsinfo

A vulnerability was found in Linux Kernel up to 6.11.10/6.12.1. It has been declared as problematic. This vulnerability affects the function uof_get_name of the component qat_420xx. The manipulation of the argument fw_objs[] with an unknown input leads to a off-by-one vulnerability. The CWE definition for the vulnerability is CWE-193. A product calculates or uses an incorrect maximum or minimum value that is 1 more, or 1 less, than the correct value. The impact remains unknown. CVE summarizes:

In the Linux kernel, the following vulnerability has been resolved: crypto: qat/qat_420xx - fix off by one in uof_get_name() This is called from uof_get_name_420xx() where "num_objs" is the ARRAY_SIZE() of fw_objs[]. The > needs to be >= to prevent an out of bounds access.

The advisory is available at git.kernel.org. This vulnerability was named CVE-2024-53163 since 11/19/2024. Technical details are known, but there is no available exploit. The structure of the vulnerability defines a possible price range of USD $0-$5k at the moment (estimation calculated on 01/18/2026).

The vulnerability scanner Nessus provides a plugin with the ID 216493 (Ubuntu 24.10 : Linux kernel vulnerabilities (USN-7276-1)), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 6.11.11 or 6.12.2 eliminates this vulnerability. Applying the patch c23661a36eea840b657e485d48ed88b246da1bb8/91eef1ad75f03d37dba926b73f9dd6f058bc4d58/93a11608fb3720e1bc2b19a2649ac2b49cca1921 is able to eliminate this problem. The bugfix is ready for download at git.kernel.org. The best possible mitigation is suggested to be upgrading to the latest version.

The vulnerability is also documented in the databases at Tenable (216493) and CERT Bund (WID-SEC-2024-3756). If you want to get best quality of vulnerability data, you may have to visit VulDB.

Affected

• Debian Linux
• Red Hat Enterprise Linux
• Ubuntu Linux
• SUSE Linux
• Oracle Linux
• RESF Rocky Linux
• Dell NetWorker
• Dell Avamar
• Red Hat OpenShift
• Dell PowerProtect Data Domain
• Open Source Linux Kernel
• Dell PowerScale OneFS

Productinfo

Type

• Operating System

Vendor

• Linux

Name

• Kernel

Version

• 6.11.0
• 6.11.1
• 6.11.2
• 6.11.3
• 6.11.4
• 6.11.5
• 6.11.6
• 6.11.7
• 6.11.8
• 6.11.9
• 6.11.10
• 6.12.0
• 6.12.1

License

• open-source

Website

• Vendor: https://www.kernel.org/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion