OPP: add index check to assert to avoid buffer overflow in _read_freq()
In the Linux kernel, the following vulnerability has been resolved: OPP: add index check to assert to avoid buffer overflow in _read_freq() Pass the freq index to the assert function to make sure we do not read a freq out of the opp->rates[] table when called from the indexed variants: dev_pm_opp_find_freq_exact_indexed() or dev_pm_opp_find_freq_ceil/floor_indexed(). Add a secondary parameter to the assert function, unused for assert_single_clk() then add assert_clk_index() which will check for the clock index when called from the _indexed() find functions.
- Products
- Kernel
- Affected versions
- Not specified
- Fixed versions
- 6.12.13, 6.13.2, 6.6.76
- CVEs
- CVE-2024-57998
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 4 Nov 2026, 21:43 UTC · Revision 1
Source evidence
OPP: add index check to assert to avoid buffer overflow in _read_freq()
core-osv · Original sourcePublished 27 Feb 2025, 02:07 UTC
In the Linux kernel, the following vulnerability has been resolved: OPP: add index check to assert to avoid buffer overflow in _read_freq() Pass the freq index to the assert function to make sure we do not read a freq out of the opp->rates[] table when called from the indexed variants: dev_pm_opp_find_freq_exact_indexed() or dev_pm_opp_find_freq_ceil/floor_indexed(). Add a secondary parameter to the assert function, unused for assert_single_clk() then add assert_clk_index() which will check for the clock index when called from the _indexed() find functions.
osv:CVE-2024-57998
Kernel
Fixed versions: 6.6.76, 6.12.13, 6.13.2
Complete source record
{
"id": "d573ae59ab5c7514e6975853dfd3356664869ee28dda7a37346482398ab30b2d",
"url": "https://osv.dev/vulnerability/CVE-2024-57998",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "OPP: add index check to assert to avoid buffer overflow in _read_freq()",
"summary": "In the Linux kernel, the following vulnerability has been resolved: OPP: add index check to assert to avoid buffer overflow in _read_freq() Pass the freq index to the assert function to make sure we do not read a freq out of the opp->rates[] table when called from the indexed variants: dev_pm_opp_find_freq_exact_indexed() or dev_pm_opp_find_freq_ceil/floor_indexed(). Add a secondary parameter to the assert function, unused for assert_single_clk() then add assert_clk_index() which will check for the clock index when called from the _indexed() find functions.",
"evidence": "osv:CVE-2024-57998",
"products": [
{
"name": {
"value": "Kernel",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "6.6.76",
"evidence": "/affected/1/ranges"
},
{
"value": "6.12.13",
"evidence": "/affected/1/ranges"
},
{
"value": "6.13.2",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
}
],
"severity": "high",
"structured": {
"id": "CVE-2024-57998",
"aliases": [
"CVE-2024-57998"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "92fcb46659d5dbfdad0422a503e289085990a5d0"
},
{
"fixed": "774dd6f0f0a61c9c3848e025d7d9eeed1a7ca4cd"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "142e17c1c2b48e3fb4f024e62ab6dee18f268694"
},
{
"fixed": "eb6ffa0192ba83ece1a318b956265519c5c7dcec"
},
{
"fixed": "7d68c20638e50d5eb4576492a7958328ae445248"
},
{
"fixed": "da2a6acc73933b7812c94794726e438cde39e037"
},
{
"fixed": "d659bc68ed489022ea33342cfbda2911a81e7a0d"
}
]
}
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-57998.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.6.0"
},
{
"fixed": "6.6.76"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.7.0"
},
{
"fixed": "6.12.13"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.13.0"
},
{
"fixed": "6.13.2"
}
]
}
],
"package": {
"name": "Kernel",
"ecosystem": "Linux"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-57998.json"
}
}
],
"modified": "2026-10-28T02:30:40.083473532Z",
"provider": "osv",
"references": [
"https://git.kernel.org/stable/c/774dd6f0f0a61c9c3848e025d7d9eeed1a7ca4cd",
"https://git.kernel.org/stable/c/7d68c20638e50d5eb4576492a7958328ae445248",
"https://git.kernel.org/stable/c/d659bc68ed489022ea33342cfbda2911a81e7a0d",
"https://git.kernel.org/stable/c/da2a6acc73933b7812c94794726e438cde39e037",
"https://git.kernel.org/stable/c/eb6ffa0192ba83ece1a318b956265519c5c7dcec",
"https://lists.debian.org/debian-lts-announce/2025/03/msg00028.html",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/57xxx/CVE-2024-57998.json",
"https://nvd.nist.gov/vuln/detail/CVE-2024-57998",
"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
],
"provider_metadata": {
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/57xxx/CVE-2024-57998.json"
}
},
"related_cves": [
{
"value": "CVE-2024-57998",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 507426,
"published_at": "2025-02-27T02:07:17.965+00:00"
}