← Zuruck zu CVEs

CVE-2024-42086

HIGH

7.8

Beschreibung

In the Linux kernel, the following vulnerability has been resolved: iio: chemical: bme680: Fix overflows in compensate() functions There are cases in the compensate functions of the driver that there could be overflows of variables due to bit shifting ops. These implications were initially discussed here [1] and they were mentioned in log message of Commit 1b3bd8592780 ("iio: chemical: Add support for Bosch BME680 sensor"). [1]: https://lore.kernel.org/linux-iio/20180728114028.3c1bbe81@archlinux/

CVE Details

CVSS v3.1 Bewertung7.8

SchweregradHIGH

CVSS VektorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AngriffsvektorLOCAL

KomplexitatLOW

Erforderliche PrivilegienLOW

BenutzerinteraktionNONE

Veroffentlicht7/29/2024

Zuletzt geandert11/3/2025

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

linux:linux_kernel

Schwachen (CWE)

CWE-787

Referenzen

https://git.kernel.org/stable/c/3add41bbda92938e9a528d74659dfc552796be4e(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/6fa31bbe2ea8665ee970258eb8320cbf231dbe9e(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/7a13d1357658d3a3c1cd7b3b9543c805a6e5e6e9(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/b0af334616ed425024bf220adda0f004806b5feb(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/b5967393d50e3c6e632efda3ea3fdde14c1bfd0e(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/ba1bb3e2a38a7fef1c1818dd4f2d9abbfdde553a(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/c326551e99f5416986074ce78bef94f6a404b517(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/fdd478c3ae98c3f13628e110dce9b6cfb0d9b3c8(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/3add41bbda92938e9a528d74659dfc552796be4e(af854a3a-2127-422b-91ae-364da2661108)

https://git.kernel.org/stable/c/6fa31bbe2ea8665ee970258eb8320cbf231dbe9e(af854a3a-2127-422b-91ae-364da2661108)

https://git.kernel.org/stable/c/7a13d1357658d3a3c1cd7b3b9543c805a6e5e6e9(af854a3a-2127-422b-91ae-364da2661108)

https://git.kernel.org/stable/c/b0af334616ed425024bf220adda0f004806b5feb(af854a3a-2127-422b-91ae-364da2661108)

https://git.kernel.org/stable/c/b5967393d50e3c6e632efda3ea3fdde14c1bfd0e(af854a3a-2127-422b-91ae-364da2661108)

https://git.kernel.org/stable/c/ba1bb3e2a38a7fef1c1818dd4f2d9abbfdde553a(af854a3a-2127-422b-91ae-364da2661108)

https://git.kernel.org/stable/c/c326551e99f5416986074ce78bef94f6a404b517(af854a3a-2127-422b-91ae-364da2661108)

https://git.kernel.org/stable/c/fdd478c3ae98c3f13628e110dce9b6cfb0d9b3c8(af854a3a-2127-422b-91ae-364da2661108)

https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.