Wind River Support Network

HomeDefectsLIN1024-3209

Fixed

LIN1024-3209 : Security Advisory - linux - CVE-2024-42086

Created: Jul 29, 2024 Updated: Aug 28, 2024

Resolved Date: Jul 29, 2024

Found In Version: 10.24.33.1

Fix Version: 10.24.33.1

Severity: Standard

Applicable for: Wind River Linux LTS 24

Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:

iio: chemical: bme680: Fix overflows in compensate() functions

There are cases in the compensate functions of the driver that
there could be overflows of variables due to bit shifting ops.
These implications were initially discussed here 1] and they
were mentioned in log message of Commit 1b3bd8592780 ("iio:
chemical: Add support for Bosch BME680 sensor").

[1]: https://lore.kernel.org/linux-iio/20180728114028.3c1bbe81@archlinux/

CREATE(Triage):(User=admin) [CVE-2024-42086 (https://nvd.nist.gov/vuln/detail/CVE-2024-42086)

CVEs

CVE-2024-42086