CVE-2024-57990: linux Off-by-one Error
CVSS: 7.8v3.1HighModified
AliasesUBUNTU-CVE-2024-57990DEBIAN-CVE-2024-57990
Published 27-02-2025Last modified 05-08-2026
Vulnerability summary
CVE-2024-57990 is a high (CVSS 7.8) Off-by-one Error vulnerability in linux. EPSS estimates a 0.24% chance of exploitation in the next 30 days, higher than 13.8% of scored vulnerabilities.
CVSS score
7.8/10
010
High · v3.1 (CVE.org)EPSS score
0.24%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 21 · Related 20RHSA-2025:20518RHSA-2026:74174SUSE-SU-2025:01919-1SUSE-SU-2025:1177-1SUSE-SU-2025:1178-1SUSE-SU-2025:1180-1SUSE-SU-2025:20190-1SUSE-SU-2025:20192-1SUSE-SU-2025:20260-1SUSE-SU-2025:20270-1USN-7521-1USN-7521-3USN-7651-1USN-7651-2USN-7651-3USN-7651-4USN-7651-5USN-7651-6USN-7652-1USN-7653-1USN-7737-1USN-7521-2
Timeline
- 27-02-2025PublishedVulnerability first disclosed.
- 05-08-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: fix off by one in mt7925_load_clc() This comparison should be >= instead of > to prevent an out of bounds read and write.
CVSS metrics
4 scores · 4 sources · 1 versionHigh 7.8Preferred score · CVE.org (CNA)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HSourcesAll 4 agree
- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- NVDNIST7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.24%
Chance of exploitation in the next 30 days
Percentile
14%
Versus all other CVEs
30-day change
0.00 pp
From 0.23% on 19-09-2026
19-09-202619-10-2026
EPSS score0.24%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ubuntu104 products
- linux< 6.8.0-64.67
- linux-allwinner-5.19All versions (No fix recorded)
- linux-aws< 6.8.0-1032.34
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Linux2 products
- linux≥ 9679ca7326e52282cc923c4d71d81c999cb6cd55, < d03b8fe1b518fc2ea2d82588e905f56d80cd64b2 | ≥ 9679ca7326e52282cc923c4d71d81c999cb6cd55, < 2d1628d32300e4f67ac0b7409cbfa7b912a8fe9d | ≥ 9679ca7326e52282cc923c4d71d81c999cb6cd55, < 08fa656c91fd5fdf47ba393795b9c0d1e97539ed | fb60020cb5b3ea4715e538c77e745c16516c5656 | ba09084d81c6480bd02fd74052045e533a5e8469 | ≥ 6.10.13, < 6.11 | ≥ 6.11.2, < 6.12 | 6.12
- linux_kernel≥ 6.10.13, < 6.11 | ≥ 6.11.2, < 6.12.13 | ≥ 6.13, < 6.13.2
Debian1 product
- linux< 6.12.13-1
3 vendors · 107 products
