CVE-2024-35992
Assigner: Linux
Published: 2024-05-20T09:47:57.069Z
State: PUBLISHED
descriptions: value: In the Linux kernel, the following vulnerability has been resolved:

phy: marvell: a3700-comphy: Fix out of bounds read

There is an out of bounds read access of 'gbe_phy_init_fix[fix_idx].addr'
every iteration after 'fix_idx' reaches 'ARRAY_SIZE(gbe_phy_init_fix)'.

Make sure 'gbe_phy_init[addr]' is used when all elements of
'gbe_phy_init_fix' array are handled.

Found by Linux Verification Center (linuxtesting.org) with SVACE.
affected: product: Linux
vendor: Linux
defaultStatus: unaffected
repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
versions: version: 934337080c6c
lessThan: 976df695f579
status: affected
versionType: git
version: 934337080c6c
lessThan: 610f175d2e16
status: affected
versionType: git
version: 934337080c6c
lessThan: 40406dfbc060
status: affected
versionType: git
version: 934337080c6c
lessThan: e4308bc22b9d
status: affected
versionType: git
product: Linux
vendor: Linux
defaultStatus: affected
repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
versions: version: 5.18
status: affected
version: 0
lessThan: 5.18
status: unaffected
versionType: custom
version: 6.1.90
lessThanOrEqual: 6.1.*
status: unaffected
versionType: custom
version: 6.6.30
lessThanOrEqual: 6.6.*
status: unaffected
versionType: custom
version: 6.8.9
lessThanOrEqual: 6.8.*
status: unaffected
versionType: custom
version: 6.9
lessThanOrEqual: *
status: unaffected
versionType: original_commit_for_fix
title: phy: marvell: a3700-comphy: Fix out of bounds read
x_generator: engine: bippy-d175d3acf727