What’s Vulnerable › Vulnerabilities

CVE-2024-57983: mailbox: th1520: Fix memory corruption due to incorrect array size

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-02-27 · updated 2026-06-17
• Weakness: CWE-787

Description

In the Linux kernel, the following vulnerability has been resolved: mailbox: th1520: Fix memory corruption due to incorrect array size The functions th1520_mbox_suspend_noirq and th1520_mbox_resume_noirq are intended to save and restore the interrupt mask registers in the MBOX ICU0. However, the array used to store these registers was incorrectly sized, leading to memory corruption when accessing all four registers. This commit corrects the array size to accommodate all four interrupt mask registers, preventing memory corruption during suspend and resume operations.

Affected products

• Linux kernel: from 6.13 before 6.13.2 — fixed in 6.13.2

How to fix

Upgrade to a fixed version: Linux kernel 6.13.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/2cd12c7fba59f30369e8647a2b726c7280903304
• https://git.kernel.org/stable/c/db049866943a38bf46a34fa120d526663339d7a5

Get alerted when CVE-2024-57983 or the next vulnerability affects your stack