CVE-2024-53162: Linux Kernel
High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days.
In the Linux kernel, the following vulnerability has been resolved: crypto: qat/qat_4xxx - fix off by one in uof_get_name() The fw_objs[] array has "num_objs" elements so the > needs to be >= to prevent an out of bounds read.
Affected products
- Linux Linux Kernel: from 6.5, before 6.6.64 (fixed in 6.6.64); from 6.7, before 6.11.11 (fixed in 6.11.11); from 6.12, before 6.12.2 (fixed in 6.12.2)
Published 2024-12-24. Last modified 2026-06-17.