01 Record

CVE-2024-26702

iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC

MediumPUBLISHEDCNA: Linux

CNA base score5.5 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

View raw JSON

02 Description

iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.22% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 13.0% of scored records. A rank, not a probability.

NVD base score

5.5 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD analysis status

Analyzed. NVD last modified this record on 2026-06-17.

Red Hat severity

Low. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2024-04-03 14:55Z2 YR AGO

Last updated

2026-05-11 20:02Z3 MO AGO

Reserved

2024-02-19

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Medium (CVSS 5.5)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weaknesses

CWE-125Out-of-bounds ReadBase

Data version

5.2

Document digest

6a4fdbc5a2b03516d3a4555c02b67bf4a6533ba78112a6e87c0f4c4d37dac0dd

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux121354b2eceb2669ebdffa76b105ad6c03413966 to < 7200170e88e3ec54d9e9c63f07514c3cead11481, 121354b2eceb2669ebdffa76b105ad6c03413966 to < 36a49290d7e6d554020057a409747a092b1d3b56, 121354b2eceb2669ebdffa76b105ad6c03413966 to < 8d5838a473e8e6d812257c69745f5920e4924a60, 121354b2eceb2669ebdffa76b105ad6c03413966 to < 176256ff8abff29335ecff905a09fb49e8dcf513, 121354b2eceb2669ebdffa76b105ad6c03413966 to < 1d8c67e94e9e977603473a543d4f322cf2c4aa01, 121354b2eceb2669ebdffa76b105ad6c03413966 to < 57d05dbbcd0b3dc0c252103b43012eef5d6430d1, 121354b2eceb2669ebdffa76b105ad6c03413966 to < 792595bab4925aa06532a14dd256db523eb4fa5e, 5.0—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/7200170e88e3ec54d9e9c63f07514c3cead11481
git.kernel.orghttps://git.kernel.org/stable/c/36a49290d7e6d554020057a409747a092b1d3b56
git.kernel.orghttps://git.kernel.org/stable/c/8d5838a473e8e6d812257c69745f5920e4924a60
git.kernel.orghttps://git.kernel.org/stable/c/176256ff8abff29335ecff905a09fb49e8dcf513
git.kernel.orghttps://git.kernel.org/stable/c/1d8c67e94e9e977603473a543d4f322cf2c4aa01
git.kernel.orghttps://git.kernel.org/stable/c/57d05dbbcd0b3dc0c252103b43012eef5d6430d1
git.kernel.orghttps://git.kernel.org/stable/c/792595bab4925aa06532a14dd256db523eb4fa5e
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2024/06/msg00017.html

01 Record index

CVE-2024-26702

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2024-26702

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References