CVE-2024-57792

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2024-57792", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2025-01-11T12:33:33.683Z", "datePublished": "2025-01-11T12:39:46.397Z", "dateUpdated": "2026-08-05T11:46:32.595Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-05T11:46:32.595Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\npower: supply: gpio-charger: Fix set charge current limits\n\nFix set charge current limits for devices which allow to set the lowest\ncharge current limit to be greater zero. If requested charge current limit\nis below lowest limit, the index equals current_limit_map_size which leads\nto accessing memory beyond allocated memory."}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H", "baseScore": 7.3, "baseSeverity": "HIGH"}, "scenarios": [{"lang": "en", "value": "AV:L - The only path to `set_charge_current_limit()` is a write to the sysfs attribute `/sys/class/power_supply/<name>/constant_charge_current_max`, handled by `power_supply_store_property()`; there is no network, adjacent-network, or bus-remote route into this platform driver.\nAC:L - On an affected board (lowest mapped `limit_ua > 0`) a single `echo 0 > constant_charge_current_max` deterministically drives the index to `current_limit_map_size` and performs the out-of-bounds read, with no race, timing window, or memory-layout precondition to win; the attacker can repeat it arbitrarily to re-sample heap contents.\nPR:L - The kernel path performs no `capable()`/capability check whatsoever \u2014 the sole gate is filesystem DAC on the sysfs node, and on the embedded, industrial and Android systems where gpio-charger current-limit mapping is actually deployed, that node is routinely chowned/chgrped by ueventd or udev rules to a non-root service account or power group so the charging daemon can throttle current; reading back the leaked value needs no privilege at all since the attribute is 0444.\nUI:N - The attacker performs the write and the subsequent read entirely on their own; no victim action, no device hotplug, and no administrator operation is needed.\nS:U - The disclosed memory, the corrupted driver state, and the mis-driven GPIO lines are all managed by the same kernel security authority; no VM, IOMMU, or sandbox boundary is crossed.\nC:L - Eight bytes of stale kernel heap at a fixed offset one element past the `devm_kmalloc_array()` map are read, and the `limit_ua` half is stored into `charge_current_limit` and handed to userspace through the world-readable `constant_charge_current_max` attribute \u2014 a repeatable heap oracle usable to leak a kernel pointer, but strictly bounded to a few bytes rather than arbitrary memory.\nI:H - The out-of-bounds `gpiodata` is shifted onto up to 32 charge-current-limit GPIO lines, and an attacker who grooms the adjacent slab slot controls that bit pattern, letting them force the charger IC to a current limit outside every legitimate mapping entry \u2014 precisely the condition the fix guards against \"for safety reasons\" \u2014 while the reported limit is falsified so monitoring cannot detect the mismatch; malicious modification of this single setting presents a direct, serious consequence (battery overcurrent, thermal damage) to the impacted component.\nA:H - The garbage bit pattern can select a charger state unreachable through the sanctioned mapping, including one that disables charging on a board whose lowest legitimate limit is nonzero, so a battery-powered industrial, medical, or embedded device drains and powers off entirely; the misconfiguration persists until re-set and can be reapplied at will."}]}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/power/supply/gpio-charger.c"], "versions": [{"version": "be2919d8355e4651386ad2fb61ddb6efe4533b1b", "lessThan": "b29c7783ac1fe36d639c089cf471ac7a46df05f0", "status": "affected", "versionType": "git"}, {"version": "be2919d8355e4651386ad2fb61ddb6efe4533b1b", "lessThan": "c3703d9340ca2820e1ac63256f4b423ea8559831", "status": "affected", "versionType": "git"}, {"version": "be2919d8355e4651386ad2fb61ddb6efe4533b1b", "lessThan": "6abbbd8286b6f944eecf3c74444c138590135211", "status": "affected", "versionType": "git"}, {"version": "be2919d8355e4651386ad2fb61ddb6efe4533b1b", "lessThan": "13eb3cae1d8e23cce96c095abe34da8028c09ac5", "status": "affected", "versionType": "git"}, {"version": "be2919d8355e4651386ad2fb61ddb6efe4533b1b", "lessThan": "f6279a98db132da0cfff18712a1b06478c32007f", "status": "affected", "versionType": "git"}, {"version": "be2919d8355e4651386ad2fb61ddb6efe4533b1b", "lessThan": "afc6e39e824ad0e44b2af50a97885caec8d213d1", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/power/supply/gpio-charger.c"], "versions": [{"version": "5.10", "status": "affected"}, {"version": "0", "lessThan": "5.10", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.233", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.176", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.123", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.69", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.8", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.13", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.10", "versionEndExcluding": "5.10.233"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.10", "versionEndExcluding": "5.15.176"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.10", "versionEndExcluding": "6.1.123"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.10", "versionEndExcluding": "6.6.69"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.10", "versionEndExcluding": "6.12.8"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.10", "versionEndExcluding": "6.13"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/b29c7783ac1fe36d639c089cf471ac7a46df05f0"}, {"url": "https://git.kernel.org/stable/c/c3703d9340ca2820e1ac63256f4b423ea8559831"}, {"url": "https://git.kernel.org/stable/c/6abbbd8286b6f944eecf3c74444c138590135211"}, {"url": "https://git.kernel.org/stable/c/13eb3cae1d8e23cce96c095abe34da8028c09ac5"}, {"url": "https://git.kernel.org/stable/c/f6279a98db132da0cfff18712a1b06478c32007f"}, {"url": "https://git.kernel.org/stable/c/afc6e39e824ad0e44b2af50a97885caec8d213d1"}], "title": "power: supply: gpio-charger: Fix set charge current limits", "x_generator": {"engine": "bippy-1.2.0"}}, "adp": [{"title": "CVE Program Container", "references": [{"url": "https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html"}, {"url": "https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2025-11-03T20:54:31.384Z"}}]}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/power/supply/gpio-charger.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "b29c7783ac1fe36d639c089cf471ac7a46df05f0", "status": "affected", "version": "be2919d8355e4651386ad2fb61ddb6efe4533b1b", "versionType": "git"}, {"lessThan": "c3703d9340ca2820e1ac63256f4b423ea8559831", "status": "affected", "version": "be2919d8355e4651386ad2fb61ddb6efe4533b1b", "versionType": "git"}, {"lessThan": "6abbbd8286b6f944eecf3c74444c138590135211", "status": "affected", "version": "be2919d8355e4651386ad2fb61ddb6efe4533b1b", "versionType": "git"}, {"lessThan": "13eb3cae1d8e23cce96c095abe34da8028c09ac5", "status": "affected", "version": "be2919d8355e4651386ad2fb61ddb6efe4533b1b", "versionType": "git"}, {"lessThan": "f6279a98db132da0cfff18712a1b06478c32007f", "status": "affected", "version": "be2919d8355e4651386ad2fb61ddb6efe4533b1b", "versionType": "git"}, {"lessThan": "afc6e39e824ad0e44b2af50a97885caec8d213d1", "status": "affected", "version": "be2919d8355e4651386ad2fb61ddb6efe4533b1b", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/power/supply/gpio-charger.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "5.10"}, {"lessThan": "5.10", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "5.10.*", "status": "unaffected", "version": "5.10.233", "versionType": "semver"}, {"lessThanOrEqual": "5.15.*", "status": "unaffected", "version": "5.15.176", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.123", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.69", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.8", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "6.13", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "6EA3241D-5BB5-4CB3-AF45-C5861D5AE7F4", "versionEndExcluding": "5.10.233", "versionStartIncluding": "5.10", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "DDBD8FC6-2357-4347-BFA1-B4A4A3039F35", "versionEndExcluding": "5.15.176", "versionStartIncluding": "5.11", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "C6F5378E-B1C8-402E-A256-91DD0F6C30C8", "versionEndExcluding": "6.1.123", "versionStartIncluding": "5.16", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "EF18E3CB-058C-4836-B36D-8073F1C09977", "versionEndExcluding": "6.6.69", "versionStartIncluding": "6.2", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "E79883DD-75BE-4DA9-B4EC-AC6DE63BD438", "versionEndExcluding": "6.12.8", "versionStartIncluding": "6.7", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc1:*:*:*:*:*:*", "matchCriteriaId": "62567B3C-6CEE-46D0-BC2E-B3717FBF7D13", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc2:*:*:*:*:*:*", "matchCriteriaId": "5A073481-106D-4B15-B4C7-FB0213B8E1D4", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc3:*:*:*:*:*:*", "matchCriteriaId": "DE491969-75AE-4A6B-9A58-8FC5AF98798F", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc4:*:*:*:*:*:*", "matchCriteriaId": "93C0660D-7FB8-4FBA-892A-B064BA71E49E", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\npower: supply: gpio-charger: Fix set charge current limits\n\nFix set charge current limits for devices which allow to set the lowest\ncharge current limit to be greater zero. If requested charge current limit\nis below lowest limit, the index equals current_limit_map_size which leads\nto accessing memory beyond allocated memory."}, {"lang": "es", "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: power: supply: gpio-charger: Fix set charge current limits Fix set charge current limits for devices which allow to set the lowest charge current limit to be mayor que cero. Si el l\u00edmite de corriente de carga solicitado es inferior al l\u00edmite inferior, el \u00edndice es igual a current_limit_map_size, lo que provoca el acceso a la memoria m\u00e1s all\u00e1 de la memoria asignada."}], "id": "CVE-2024-57792", "lastModified": "2026-08-04T11:22:27.730", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.3, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.5, "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2025-01-11T13:15:29.420", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/13eb3cae1d8e23cce96c095abe34da8028c09ac5"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/6abbbd8286b6f944eecf3c74444c138590135211"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/afc6e39e824ad0e44b2af50a97885caec8d213d1"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/b29c7783ac1fe36d639c089cf471ac7a46df05f0"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/c3703d9340ca2820e1ac63256f4b423ea8559831"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/f6279a98db132da0cfff18712a1b06478c32007f"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"bugzilla": {"description": "kernel: power: supply: gpio-charger: Fix set charge current limits", "id": "2337114", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2337114"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "details": ["In the Linux kernel, the following vulnerability has been resolved:\npower: supply: gpio-charger: Fix set charge current limits\nFix set charge current limits for devices which allow to set the lowest\ncharge current limit to be greater zero. If requested charge current limit\nis below lowest limit, the index equals current_limit_map_size which leads\nto accessing memory beyond allocated memory."], "name": "CVE-2024-57792", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2025-01-11T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2024-57792\nhttps://nvd.nist.gov/vuln/detail/CVE-2024-57792\nhttps://lore.kernel.org/linux-cve-announce/2025011150-CVE-2024-57792-0002@gregkh/T"], "threat_severity": "Low"}

{"created": "2025-07-12T22:31:20.400064+00:00", "updated": "2025-07-12T22:31:20.400115+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}