CVE-2024-26599: pwm: Fix out-of-bounds access in of_pwm_single_xlate()

Description

In the Linux kernel, the following vulnerability has been resolved:

pwm: Fix out-of-bounds access in of_pwm_single_xlate()

With args->args_count == 2 args->args[2] is not defined. Actually the
flags are contained in args->args[1].

Classification

CVE ID: CVE-2024-26599

Affected Products

Vendor: Linux

Product: Linux

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.04% (probability of being exploited)

EPSS Percentile: 5.08% (scored less or equal to compared to others)

EPSS Date: 2025-02-04 (when was this score calculated)

References

https://git.kernel.org/stable/c/7b85554c7c2aee91171e038e4d5442ffa130b282
https://git.kernel.org/stable/c/e5f2b4b62977fb6c2efcbc5779e0c9dce18215f7
https://git.kernel.org/stable/c/bae45b7ebb31984b63b13c3519fd724b3ce92123
https://git.kernel.org/stable/c/a297d07b9a1e4fb8cda25a4a2363a507d294b7c9

Timeline