CVE-2024-26593— i2c: i801: Fix block process call transactions
Possible ATT&CK Techniques 1AI
T1059 · Command and Scripting InterpreterAffected Version Matrix 16
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Linux | Linux | 315cd67c945351f8a569500f8ab16b7fa94026e8< d074d5ff5ae77b18300e5079c6bda6342a4d44b7 | affected |
315cd67c945351f8a569500f8ab16b7fa94026e8< 7a14b8a477b88607d157c24aeb23e7389ec3319f | affected | ||
315cd67c945351f8a569500f8ab16b7fa94026e8< 1f8d0691c50581ba6043f009ec9e8b9f78f09d5a | affected | ||
315cd67c945351f8a569500f8ab16b7fa94026e8< 491528935c9c48bf341d8b40eabc6c4fc5df6f2c | affected | ||
315cd67c945351f8a569500f8ab16b7fa94026e8< 6be99c51829b24c914cef5bff6164877178e84d9 | affected | ||
315cd67c945351f8a569500f8ab16b7fa94026e8< 609c7c1cc976e740d0fed4dbeec688b3ecb5dce2 | affected | ||
315cd67c945351f8a569500f8ab16b7fa94026e8< c1c9d0f6f7f1dbf29db996bd8e166242843a5f21 | affected | ||
5.3 | affected | ||
| … +8 more rows | |||
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2024-26593
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
i2c: i801: Fix block process call transactions
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: i2c: i801: Fix block process call transactions According to the Intel datasheets, software must reset the block buffer index twice for block process call transactions: once before writing the outgoing data to the buffer, and once again before reading the incoming data from the buffer. The driver is currently missing the second reset, causing the wrong portion of the block buffer to be read.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。dex是一种身份服务，它使用 OpenID Connect 来驱动其他应用程序的身份验证。 Linux Kernel 存在安全漏洞，该漏洞源于驱动程序缺少第二次重置，导致缓冲区越界读取。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2024-26593
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-26593
请登录查看更多情报信息。
Mailing List Discussions for CVE-2024-26593 (3)
Other References for CVE-2024-26593 (7)
Same Patch Batch · Linux · 2024-02-23 · 19 CVEs total
| CVE-2024-26594 | 9.1 CRITICAL | ksmbd: validate mech token in session setup |
| CVE-2024-26598 | 8.8 HIGH | KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache |
| CVE-2023-52461 | 7.8 HIGH | drm/sched: Fix bounds limiting when given a malformed entity |
| CVE-2024-26597 | 7.8 HIGH | net: qualcomm: rmnet: fix global oob in rmnet_policy |
| CVE-2023-52454 | 7.5 HIGH | nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length |
| CVE-2023-52453 | 7.1 HIGH | hisi_acc_vfio_pci: Update migration data pointer correctly on saving/resume |
| CVE-2024-26595 | mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path | |
| CVE-2024-26596 | net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events | |
| CVE-2023-52463 | efivarfs: force RO when remounting if SetVariable is not supported | |
| CVE-2023-52464 | EDAC/thunderx: Fix possible out-of-bounds string access | |
| CVE-2023-52462 | bpf: fix check for attempt to corrupt spilled pointer | |
| CVE-2023-52460 | drm/amd/display: Fix NULL pointer dereference at hibernate | |
| CVE-2023-52459 | media: v4l: async: Fix duplicated list deletion | |
| CVE-2023-52457 | serial: 8250: omap: Don't skip resource freeing if pm_runtime_resume_and_get() failed | |
| CVE-2023-52458 | block: add check that partition length needs to be aligned with block size | |
| CVE-2023-52456 | serial: imx: fix tx statemachine deadlock | |
| CVE-2023-52455 | iommu: Don't reserve 0-length IOVA region | |
| CVE-2024-26599 | pwm: Fix out-of-bounds access in of_pwm_single_xlate() |
IV. Related Vulnerabilities
Same product: Linux
- CVE-2026-74579
netfilter: nft_payload: fix mask build for partial field off - CVE-2026-74578
crypto: algif_skcipher - force synchronous processing on tre - CVE-2026-74577
net: mpls: initialize rtm_tos in mpls_getroute() - CVE-2026-74576
mm/slab: prevent unbounded recursion in free path with new k - CVE-2026-74574
dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev
Same vendor: Linux
- CVE-2026-74579
netfilter: nft_payload: fix mask build for partial field off - CVE-2026-74578
crypto: algif_skcipher - force synchronous processing on tre - CVE-2026-74577
net: mpls: initialize rtm_tos in mpls_getroute() - CVE-2026-74576
mm/slab: prevent unbounded recursion in free path with new k - CVE-2026-74574
dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev
V. Comments for CVE-2024-26593
No comments yet