7.1

CVE-2024-58014: linux Out-of-bounds Read

CVSS: 7.1v3.1HighModified
AliasesUBUNTU-CVE-2024-58014DEBIAN-CVE-2024-58014
Published 27-02-2025Last modified 15-10-2026
Open JSON

Vulnerability summary

CVE-2024-58014 is a high (CVSS 7.1) Out-of-bounds Read vulnerability in linux. EPSS estimates a 0.22% chance of exploitation in the next 30 days, higher than 12.1% of scored vulnerabilities.

Overall risk
28/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.1/10
010
High · v3.1 (NVD)
EPSS score
0.22%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 60 · Related 57
DLA-4102-1DLA-4178-1RHSA-2025:20095RHSA-2025:20518SUSE-SU-2025:01919-1SUSE-SU-2025:1027-1

Timeline

  1. 27-02-2025
    PublishedVulnerability first disclosed.
  2. 15-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() In 'wlc_phy_iqcal_gainparams_nphy()', add gain range check to WARN() instead of possible out-of-bounds 'tbl_iqcal_gainparams_nphy' access. Compile tested only. Found by Linux Verification Center (linuxtesting.org) with SVACE.

CVSS metrics

3 scores · 3 sources · 1 version

EPSS trend

Probability

0.22%

Chance of exploitation in the next 30 days

Percentile

12%

Versus all other CVEs

30-day change

0.00 pp

From 0.22% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.22%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu137 products
  • linuxAll versions (No fix recorded) | < 5.4.0-216.236 | < 5.15.0-140.150 | < 6.8.0-64.67
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 5.4.0-1146.156 | < 5.15.0-1084.91 | < 6.8.0-1032.34
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ 5b435de0d786869c95d1962121af0d7df2542009, < 0a457223cb2b9ca46bae7de387d0f4c093b0220d | ≥ 5b435de0d786869c95d1962121af0d7df2542009, < 13ef16c4fe384b1e70277bbe1d87934ee6c81e12 | ≥ 5b435de0d786869c95d1962121af0d7df2542009, < d280a12e9b87819a8a209639d600b48a2d6d65dc | ≥ 5b435de0d786869c95d1962121af0d7df2542009, < ada9df08b3ef683507e75b92f522fb659260147f | ≥ 5b435de0d786869c95d1962121af0d7df2542009, < 093286c33409bf38896f2dab0c0bb6ca388afb33 | ≥ 5b435de0d786869c95d1962121af0d7df2542009, < c27ce584d274f6ad3cba2294497de824a3c66646 | ≥ 5b435de0d786869c95d1962121af0d7df2542009, < 6f6e293246dc1f5b2b6b3d0f2d757598489cda79 | ≥ 5b435de0d786869c95d1962121af0d7df2542009, < 3f4a0948c3524ae50f166dbc6572a3296b014e62 | 3.2
  • linux_kernel≥ 3.2, < 5.4.291 | ≥ 5.5, < 5.10.235 | ≥ 5.11, < 5.15.179 | ≥ 5.16, < 6.1.129 | ≥ 6.2, < 6.6.78 | ≥ 6.7, < 6.12.14 | ≥ 6.13, < 6.13.3
Debian1 product
  • linux< 6.1.129-1 | < 6.12.15-1

3 vendors · 140 products

References

58 links
Show all 58 references