CVE-2024-57953
MEDIUM EPSS 10.6%
Published Feb 27, 20251y ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Published Feb 27, 2025 1y ago
Last Modified Jun 17, 2026 1w ago
Description
In the Linux kernel, the following vulnerability has been resolved: rtc: tps6594: Fix integer overflow on 32bit systems The problem is this multiply in tps6594_rtc_set_offset() tmp = offset * TICKS_PER_HOUR; The "tmp" variable is an s64 but "offset" is a long in the (-277774)-277774 range. On 32bit systems a long can hold numbers up to approximately two billion. The number of TICKS_PER_HOUR is really large, (32768 * 3600) or roughly a hundred million. When you start multiplying by a hundred million it doesn't take long to overflow the two billion mark. Probably the safest way to fix this is to change the type of TICKS_PER_HOUR to long long because it's such a large number.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High
Threat Intelligence
EPSS Exploit Probability
10.6% percentile
Exploit & Patch Status
No Known Exploit
Patch Available
Weaknesses 1
CWE-190 Integer Overflow or Wraparound Numeric Error
Affected Products 2
References 3
- git.kernel.org https://git.kernel.org/stable/c/09c4a610153286cef54d4f0c85398f4e32fc227e
- git.kernel.org https://git.kernel.org/stable/c/5127f3cbfc78a7b301b86328247230bec47e0bb3
- git.kernel.org https://git.kernel.org/stable/c/53b0c7b15accb18d15d95c7fe68f61630ebfd1ca
Remediation
- git.kernel.org https://git.kernel.org/stable/c/09c4a610153286cef54d4f0c85398f4e32fc227e
- git.kernel.org https://git.kernel.org/stable/c/5127f3cbfc78a7b301b86328247230bec47e0bb3
- git.kernel.org https://git.kernel.org/stable/c/53b0c7b15accb18d15d95c7fe68f61630ebfd1ca