In the Linux kernel, the following vulnerability has been resolved:
drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
The perf tool allows users to create event groups through following cmd [1], but the driver does not check whether the array index is out of bounds when writing data to the event_group array. If the number of events in an event_group is greater than HNS3_PMU_MAX_HW_EVENTS, the memory write overflow of event_group array occurs.
Add array index check to fix the possible array out of bounds violation, and return directly when write new events are written to array bounds.
There are 9 different events in an event_group. [1] perf stat -e '{pmu/event1/, ... ,pmu/event9/}
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernelUpgrade kernel-modules-extra-commonUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-libbpf-develUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.94-99.176Upgrade kernel-libbpf-staticUpgrade kernel-modules-extraUpgrade bpftoolUpgrade python3-perfUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-aarch64Upgrade perf | Feb 17, 2025 | Jun 19, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-symsUpgrade kernel-default-baseUpgrade kernel-devel-rtUpgrade kernel-rt-livepatchUpgrade ocfs2-kmp-rtUpgrade kernel-syms-azureUpgrade dtb-armUpgrade dtb-apmUpgrade kernel-default-vdsoUpgrade kernel-docsUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-rt-develUpgrade dlm-kmp-azureUpgrade dtb-xilinxUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-macrosUpgrade kernel-rt_debug-vdsoUpgrade dtb-mediatekUpgrade kernel-rtUpgrade kernel-kvmsmallUpgrade kernel-obs-qaUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-azure-develUpgrade cluster-md-kmp-defaultUpgrade dtb-sprdUpgrade kernel-azure-livepatch-develUpgrade kernel-debugUpgrade cluster-md-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-default-extraUpgrade dlm-kmp-defaultUpgrade dtb-nvidiaUpgrade dlm-kmp-rtUpgrade dtb-qcomUpgrade dtb-amlogicUpgrade dtb-rockchipUpgrade kernel-default-base-rebuildUpgrade kernel-debug-livepatch-develUpgrade gfs2-kmp-defaultUpgrade dtb-socionextUpgrade kernel-azure-extraUpgrade kernel-rt-extraUpgrade dtb-lgUpgrade kernel-syms-rtUpgrade kernel-azure-vdsoUpgrade kernel-rt_debugUpgrade kernel-source-vanillaUpgrade dtb-renesasUpgrade dtb-allwinnerUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-defaultUpgrade kernel-devel-azureUpgrade kernel-rt-vdsoUpgrade dtb-broadcomUpgrade dlm-kmp-64kbUpgrade dtb-exynosUpgrade kernel-kvmsmall-develUpgrade kernel-default-develUpgrade kernel-debug-develUpgrade kselftests-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-buildUpgrade kernel-docs-htmlUpgrade kernel-default-livepatchUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-azureUpgrade dtb-amdUpgrade dtb-caviumUpgrade kernel-azureUpgrade dtb-appleUpgrade kernel-default-livepatch-develUpgrade kernel-debug-vdsoUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-64kbUpgrade dtb-freescaleUpgrade dtb-alteraUpgrade kernel-rt-optionalUpgrade kernel-azure-optionalUpgrade kernel-64kb-optionalUpgrade kernel-64kbUpgrade gfs2-kmp-rtUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade dtb-hisiliconUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-source-rtUpgrade kernel-rt_debug-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-marvellUpgrade dtb-amazonUpgrade reiserfs-kmp-defaultUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-azure | Jul 10, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-fdeUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-genericUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-awsUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-oracleUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-azureUpgrade linux-image-oem-24.04aUpgrade linux-image-gcpUpgrade linux-image-gkeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-kvmUpgrade linux-image-virtualUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-ibm | Aug 9, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub