CVE-2024-57792

What it actually does

Out-of-bounds memory access in gpio-charger when requested charge current limit falls below the lowest allowed value, causing index to equal current_limit_map_size and reading/writing past allocated buffer.

Why it matters to the business

Potential kernel crashes, memory corruption, or privilege escalation on affected Linux systems; low exploit likelihood reduces immediate risk but still requires patching to prevent denial of service or code execution in charger-related code paths.

How an attack unfolds

An attacker with local access supplies a charge current request below the minimum supported limit; the driver computes an out-of-range index into the limit map and performs an invalid memory operation, which could be chained with other kernel primitives for privilege escalation in environments where power management interfaces are reachable.

How to fix it

Update to fixed kernel versions containing the gpio-charger limit check patch; for the listed chromium-browser packages on Ubuntu 14.04 LTS upgrade to 58.0.3029.81-0ubuntu0.14.04.1172 or later.

How to confirm the fix worked

Confirm kernel source contains the corrected index bounds check before current_limit_map_size access; verify running kernel version matches or exceeds the fixed release for affected distributions.

Typical attack path

1. Obtain local execution context on target system
2. Interact with power supply sysfs or charger interfaces to request charge current below lowest supported value
3. Trigger index calculation that equals map size
4. Perform out-of-bounds read or write to corrupt kernel memory
5. Escalate privileges or cause denial of service

How to detect it

Review kernel logs for out-of-bounds access warnings or oops in gpio-charger; inspect sysfs interactions with charge current limits; correlate with process activity attempting to set charger parameters below documented minimums.

What your security team should do

• Apply the referenced kernel or chromium-browser update immediately on all Ubuntu 14.04 LTS systems
• Audit power supply and charger driver usage in embedded or IoT deployments
• Monitor for kernel oops or panic logs related to gpio-charger
• Restrict unprivileged access to sysfs power interfaces where feasible