CVE-2024-26970

What it actually does

Missing empty termination element at the end of frequency table arrays in the Qualcomm IPQ6018 GCC clock driver allows out-of-bounds memory access during traversal by qcom_find_freq() and similar functions.

Why it matters to the business

Systems using affected Linux kernels on IPQ6018 hardware may experience unexpected crashes or denial of service when clock frequency lookups occur, with limited risk of data exposure but potential operational disruption on embedded or networking devices.

How an attack unfolds

An attacker with local access triggers clock frequency table lookups that walk past the array bounds due to the missing terminator, leading to kernel memory corruption or a crash; the low EPSS and lack of KEV listing indicate no widespread public exploitation despite the buffer overflow family classification.

How to fix it

Apply the upstream fix by updating the Linux kernel to commit ae60e3342296f766f88911d39199f77b05f657a6 or later stable versions containing the terminating empty element in gcc-ipq6018 frequency tables.

How to confirm the fix worked

Inspect the gcc-ipq6018 frequency table definitions in the kernel source to confirm an empty terminating entry exists at the end of each array, then recompile and test clock lookups on IPQ6018 hardware.

Typical attack path

1. Obtain local user privileges on an affected Linux system
2. Trigger clock driver frequency table traversal via device initialization or power management events
3. Cause out-of-bounds read or write due to absent array terminator
4. Result in kernel panic or denial of service

How to detect it

Review kernel ring buffer and dmesg logs for out-of-bounds access warnings or panics originating from clk-qcom or gcc-ipq6018 code paths; correlate with device boot or power management events on IPQ6018 platforms.

What your security team should do

• Prioritize patching embedded or networking devices running the IPQ6018 clock driver within standard maintenance windows
• Monitor kernel logs for oops or panic messages related to clock frequency lookups
• Limit local user access on affected systems until updated kernels are deployed