HighFix available
mmc: core: Avoid negative index with array access
Type: advisorySources: OSV
In the Linux kernel, the following vulnerability has been resolved: mmc: core: Avoid negative index with array access Commit 4d0c8d0aef63 ("mmc: core: Use mrq.sbc in close-ended ffu") assigns prev_idata = idatas[i - 1], but doesn't check that the iterator i is greater than zero. Let's fix this by adding a check.
- Products
- Kernel
- Affected versions
- Not specified
- Fixed versions
- 5.10.215, 5.15.154, 5.4.274, 6.1.84, 6.6.24, 6.7.12, 6.8.3
- CVEs
- CVE-2024-35813
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 3 Nov 2026, 08:07 UTC · Revision 1
Source evidence
mmc: core: Avoid negative index with array access
core-osv · Original sourcePublished 17 May 2024, 13:23 UTC
In the Linux kernel, the following vulnerability has been resolved: mmc: core: Avoid negative index with array access Commit 4d0c8d0aef63 ("mmc: core: Use mrq.sbc in close-ended ffu") assigns prev_idata = idatas[i - 1], but doesn't check that the iterator i is greater than zero. Let's fix this by adding a check.
osv:CVE-2024-35813
Kernel
Fixed versions: 5.4.274, 5.10.215, 5.15.154, 6.1.84, 6.6.24, 6.7.12, 6.8.3
Complete source record
{
"id": "2b647772d8b503e9956f893ac85a228d96e871030f7c333f09d38c98641692c1",
"url": "https://osv.dev/vulnerability/CVE-2024-35813",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "mmc: core: Avoid negative index with array access",
"summary": "In the Linux kernel, the following vulnerability has been resolved: mmc: core: Avoid negative index with array access Commit 4d0c8d0aef63 (\"mmc: core: Use mrq.sbc in close-ended ffu\") assigns prev_idata = idatas[i - 1], but doesn't check that the iterator i is greater than zero. Let's fix this by adding a check.",
"evidence": "osv:CVE-2024-35813",
"products": [
{
"name": {
"value": "Kernel",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.4.274",
"evidence": "/affected/1/ranges"
},
{
"value": "5.10.215",
"evidence": "/affected/1/ranges"
},
{
"value": "5.15.154",
"evidence": "/affected/1/ranges"
},
{
"value": "6.1.84",
"evidence": "/affected/1/ranges"
},
{
"value": "6.6.24",
"evidence": "/affected/1/ranges"
},
{
"value": "6.7.12",
"evidence": "/affected/1/ranges"
},
{
"value": "6.8.3",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
}
],
"severity": "high",
"structured": {
"id": "CVE-2024-35813",
"aliases": [
"CVE-2024-35813"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "f49f9e802785291149bdc9c824414de4604226b4"
},
{
"fixed": "b9a7339ae403035ffe7fc37cb034b36947910f68"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "59020bf0999ff7da8aedcd00ef8f0d75d93b6d20"
},
{
"fixed": "2b539c88940e22494da80a93ee1c5a28bbad10f6"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "50b8b7a22e90bab9f1949b64a88ff17ab10913ec"
},
{
"fixed": "81b8645feca08a54c7c4bf36e7b176f4983b2f28"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "c4edcd134bb72b3b0acc884612d624e48c9d057f"
},
{
"fixed": "ad9cc5e9e53ab94aa0c7ac65d43be7eb208dcb55"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "1653a8102868264f3488c298a9f20af2add9a288"
},
{
"fixed": "4466677dcabe2d70de6aa3d4bd4a4fafa94a71f2"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "eed9119f8f8e8fbf225c08abdbb58597fba807e0"
},
{
"fixed": "064db53f9023a2d5877a2d12de6bc27995f6ca56"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "4d0c8d0aef6355660b6775d57ccd5d4ea2e15802"
},
{
"fixed": "7d0e8a6147550aa058fa6ade8583ad252aa61304"
},
{
"fixed": "cf55a7acd1ed38afe43bba1c8a0935b51d1dc014"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "5.4.269"
},
{
"fixed": "5.4.274"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "5.10.210"
},
{
"fixed": "5.10.215"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "5.15.149"
},
{
"fixed": "5.15.154"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "6.1.76"
},
{
"fixed": "6.1.84"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "6.6.15"
},
{
"fixed": "6.6.24"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "6.7.3"
},
{
"fixed": "6.7.12"
}
]
}
],
"versions": [
"v5.4.273",
"v5.4.272",
"v5.4.271",
"v5.4.270",
"v5.4.269",
"v5.10.214",
"v5.10.213",
"v5.10.212",
"v5.10.211",
"v5.10.210",
"v5.15.153",
"v5.15.152",
"v5.15.151",
"v5.15.150",
"v5.15.149",
"v6.1.83",
"v6.1.82",
"v6.1.81",
"v6.1.80",
"v6.1.79",
"v6.1.78",
"v6.1.77",
"v6.1.76",
"v6.6.23",
"v6.6.22",
"v6.6.21",
"v6.6.20",
"v6.6.19",
"v6.6.18",
"v6.6.17",
"v6.6.16",
"v6.6.15",
"v6.7.11",
"v6.7.10",
"v6.7.9",
"v6.7.8",
"v6.7.7",
"v6.7.6",
"v6.7.5",
"v6.7.4",
"v6.7.3"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-35813.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.4.274"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.5.0"
},
{
"fixed": "5.10.215"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.11.0"
},
{
"fixed": "5.15.154"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.16.0"
},
{
"fixed": "6.1.84"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.2.0"
},
{
"fixed": "6.6.24"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.7.0"
},
{
"fixed": "6.7.12"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.8.0"
},
{
"fixed": "6.8.3"
}
]
}
],
"package": {
"name": "Kernel",
"ecosystem": "Linux"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-35813.json"
}
}
],
"modified": "2026-10-28T02:30:27.400372340Z",
"provider": "osv",
"references": [
"https://cert-portal.siemens.com/productcert/html/ssa-265688.html",
"https://git.kernel.org/stable/c/064db53f9023a2d5877a2d12de6bc27995f6ca56",
"https://git.kernel.org/stable/c/2b539c88940e22494da80a93ee1c5a28bbad10f6",
"https://git.kernel.org/stable/c/4466677dcabe2d70de6aa3d4bd4a4fafa94a71f2",
"https://git.kernel.org/stable/c/7d0e8a6147550aa058fa6ade8583ad252aa61304",
"https://git.kernel.org/stable/c/81b8645feca08a54c7c4bf36e7b176f4983b2f28",
"https://git.kernel.org/stable/c/ad9cc5e9e53ab94aa0c7ac65d43be7eb208dcb55",
"https://git.kernel.org/stable/c/b9a7339ae403035ffe7fc37cb034b36947910f68",
"https://git.kernel.org/stable/c/cf55a7acd1ed38afe43bba1c8a0935b51d1dc014",
"https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/35xxx/CVE-2024-35813.json",
"https://nvd.nist.gov/vuln/detail/CVE-2024-35813",
"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
],
"provider_metadata": {
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/35xxx/CVE-2024-35813.json"
}
},
"related_cves": [
{
"value": "CVE-2024-35813",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 493635,
"published_at": "2024-05-17T13:23:18.902+00:00"
}