In the Linux kernel, the following vulnerability has been resolved:
ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port()
The if statement: if (port >= DSAF_GE_NUM) return;
limits the value of port less than DSAF_GE_NUM (i.e., 8). However, if the value of port is 6 or 7, an array overflow could occur: port_rst_off = dsaf_dev->mac_cb[port]->port_rst_off;
because the length of dsaf_dev->mac_cb is DSAF_MAX_PORT_NUM (i.e., 6).
To fix this possible array overflow, we first check port and if it is greater than or equal to DSAF_MAX_PORT_NUM, the function returns.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-develUpgrade kernel-rt-modules-extraUpgrade kernel-rt-develUpgrade kernel-debug-modulesUpgrade kernel-cross-headersUpgrade kernel-rt-debug-coreUpgrade kernel-64k-debug-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-devel-matchedUpgrade python3-perfUpgrade kernel-64kUpgrade kernel-64k-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-develUpgrade bpftoolUpgrade kernelUpgrade kernel-rt-kvmUpgrade kernel-rt-coreUpgrade kernel-64k-coreUpgrade kernel-headersUpgrade kernel-debug-develUpgrade rtlaUpgrade kernel-64k-modulesUpgrade kernel-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-uki-virtUpgrade kernel-modulesUpgrade kernel-64k-modules-extraUpgrade kernel-debug-coreUpgrade perfUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-uki-virtUpgrade kernel-64k-debugUpgrade kernel-abi-stablelistsUpgrade kernel-rt-modulesUpgrade kernel-modules-extraUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-debug-modules-coreUpgrade kernel-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-rtUpgrade kernel-debugUpgrade kernel-zfcpdump-develUpgrade kernel-docUpgrade rvUpgrade kernel-tools-libsUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-develUpgrade kernel-64k-debug-develUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-toolsUpgrade kernel-zfcpdump-coreUpgrade libperfUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-develUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-zfcpdump-modules | Aug 12, 2024 | May 24, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade bpftoolUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.93-87.444Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-livepatch-4.14.262-200.489Upgrade perfUpgrade kernel-debuginfo-common-aarch64 | Nov 12, 2024 | May 24, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 24, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-tools | Oct 8, 2024 | May 24, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-develUpgrade python-perfUpgrade python3-perfUpgrade kernel-toolsUpgrade perfUpgrade kernel-headers | Jan 21, 2025 | May 24, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libs | Oct 8, 2024 | May 24, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 24, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Jul 16, 2024 | May 24, 2024 |
| Rocky_linux | — | Upgrade kernel-debug-devel-matchedUpgrade python3-perfUpgrade libperf-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modulesUpgrade perf-debuginfoUpgrade kernel-modules-coreUpgrade libperfUpgrade kernel-toolsUpgrade kernel-rt-debug-develUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-devel-matchedUpgrade rtlaUpgrade rvUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-develUpgrade perfUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-develUpgrade kernel-zfcpdump-debuginfoUpgrade bpftoolUpgrade kernelUpgrade kernel-debugUpgrade kernel-rt-develUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modules-coreUpgrade kernel-tools-libsUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debugUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-cross-headersUpgrade kernel-coreUpgrade kernel-rt-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-kvmUpgrade kernel-rtUpgrade kernel-headersUpgrade kernel-debug-core | Jul 29, 2024 | May 24, 2024 |
| Suse | — | Upgrade dtb-amdUpgrade ocfs2-kmp-azureUpgrade kernel-devel-azureUpgrade kernel-obs-buildUpgrade kernel-rt-vdsoUpgrade kernel-rt-extraUpgrade kernel-sourceUpgrade kernel-source-rtUpgrade kernel-source-azureUpgrade kernel-kvmsmall-vdsoUpgrade dtb-marvellUpgrade kernel-azure-extraUpgrade dtb-caviumUpgrade kernel-64kb-extraUpgrade dtb-broadcomUpgrade kernel-debug-develUpgrade dtb-amazonUpgrade kernel-default-vdsoUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-appleUpgrade kernel-rt_debugUpgrade dtb-alteraUpgrade dlm-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-default-develUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-azureUpgrade kernel-azure-baseUpgrade dtb-renesasUpgrade dtb-exynosUpgrade kernel-debug-vdsoUpgrade kernel-source-vanillaUpgrade gfs2-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-defaultUpgrade dtb-sprdUpgrade kernel-64kb-optionalUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-lgUpgrade kernel-syms-azureUpgrade dtb-freescaleUpgrade kernel-zfcpdumpUpgrade kernel-azureUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-rt-optionalUpgrade kernel-azure-develUpgrade dtb-allwinnerUpgrade kernel-64kbUpgrade kernel-default-extraUpgrade reiserfs-kmp-azureUpgrade kernel-default-baseUpgrade kernel-default-base-rebuildUpgrade kernel-symsUpgrade dlm-kmp-rtUpgrade dtb-rockchipUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade dtb-mediatekUpgrade kernel-devel-rtUpgrade dlm-kmp-azureUpgrade dtb-socionextUpgrade dtb-apmUpgrade gfs2-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-develUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-docsUpgrade dtb-hisiliconUpgrade kernel-macrosUpgrade kernel-debugUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-rtUpgrade kernel-rt-livepatchUpgrade kernel-rt-develUpgrade dtb-amlogicUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-develUpgrade dlm-kmp-defaultUpgrade dtb-qcomUpgrade kernel-kvmsmallUpgrade dtb-xilinxUpgrade reiserfs-kmp-rtUpgrade kernel-azure-vdsoUpgrade kernel-debug-livepatch-develUpgrade kernel-default-manUpgrade kernel-rtUpgrade kernel-default-optionalUpgrade cluster-md-kmp-defaultUpgrade dtb-nvidiaUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-obs-qaUpgrade reiserfs-kmp-defaultUpgrade kernel-defaultUpgrade dtb-arm | Aug 9, 2024 | May 24, 2024 |
| Ubuntu | — | Upgrade linux-ibmUpgrade linux-oracleUpgrade linux-aws-5.4Upgrade linux-raspiUpgrade linux-aws-hweUpgrade linux-hwe-5.4Upgrade linux-fipsUpgrade linux-azure-fipsUpgrade linux-gcpUpgrade linux-oracle-5.4Upgrade linux-kvmUpgrade linux-gcp-5.4Upgrade linux-gkeopUpgrade linux-aws-fipsUpgrade linuxUpgrade linux-bluefieldUpgrade linux-gcp-4.15Upgrade linux-gcp-fipsUpgrade linux-azure-4.15Upgrade linux-ibm-5.4Upgrade linux-awsUpgrade linux-hweUpgrade linux-raspi-5.4Upgrade linux-azure-5.4Upgrade linux-azure | Nov 19, 2024 | May 24, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | May 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub