Threats tagged 'ghsa-f23q-rhxc-p26p'

CVE-2024-58007 is a vulnerability in the Linux kernel's Qualcomm socinfo driver that causes an out-of-bounds read when exposing the serial number on MSM8916 devices. The flaw arises because the firmware version used does not support the serial_num field, but the kernel incorrectly reads beyond the bounds of the socinfo struct, exposing a constant serial number that is actually invalid data. The issue is fixed by correcting the boundary check to include the size of the serial_num field.