In the Linux kernel, the following vulnerability has been resolved:
drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
The perf tool allows users to create event groups through following cmd [1], but the driver does not check whether the array index is out of bounds when writing data to the event_group array. If the number of events in an event_group is greater than HNS3_PMU_MAX_HW_EVENTS, the memory write overflow of event_group array occurs.
Add array index check to fix the possible array out of bounds violation, and return directly when write new events are written to array bounds.
There are 9 different events in an event_group. [1] perf stat -e '{pmu/event1/, ... ,pmu/event9/}
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-livepatch-6.1.94-99.176Upgrade python3-perfUpgrade bpftoolUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-staticUpgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-libbpf-develUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-headersUpgrade kernel-modules-extra-common | Feb 17, 2025 | Jun 19, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade kernel-default-livepatch-develUpgrade dtb-lgUpgrade kernel-default-livepatchUpgrade gfs2-kmp-azureUpgrade kernel-debug-vdsoUpgrade gfs2-kmp-64kbUpgrade dtb-alteraUpgrade dtb-appleUpgrade dtb-caviumUpgrade dtb-freescaleUpgrade kernel-azure-extraUpgrade gfs2-kmp-defaultUpgrade kernel-azure-vdsoUpgrade dtb-exynosUpgrade kernel-azureUpgrade dtb-amdUpgrade dtb-socionextUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade kernel-debug-develUpgrade dtb-amazonUpgrade dtb-marvellUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-source-rtUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-rtUpgrade kernel-kvmsmall-develUpgrade dtb-allwinnerUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-optionalUpgrade dtb-renesasUpgrade kernel-default-develUpgrade kernel-64kbUpgrade kernel-64kb-optionalUpgrade ocfs2-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade kernel-syms-rtUpgrade gfs2-kmp-rtUpgrade kernel-azure-optionalUpgrade dtb-hisiliconUpgrade kselftests-kmp-azureUpgrade kernel-sourceUpgrade kernel-source-azureUpgrade kernel-docs-htmlUpgrade kernel-obs-buildUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-rt-extraUpgrade kernel-rt_debugUpgrade kernel-source-vanillaUpgrade kernel-64kb-develUpgrade dtb-amlogicUpgrade kernel-docsUpgrade dtb-mediatekUpgrade dtb-nvidiaUpgrade cluster-md-kmp-rtUpgrade kernel-symsUpgrade kernel-defaultUpgrade cluster-md-kmp-64kbUpgrade dtb-armUpgrade kernel-default-vdsoUpgrade kernel-rt-develUpgrade kernel-rtUpgrade kernel-default-extraUpgrade dtb-apmUpgrade kernel-syms-azureUpgrade kernel-devel-rtUpgrade kernel-default-base-rebuildUpgrade kernel-default-baseUpgrade dtb-rockchipUpgrade kernel-rt-livepatchUpgrade dtb-qcomUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-extraUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-develUpgrade dtb-xilinxUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-macrosUpgrade kernel-debugUpgrade reiserfs-kmp-azureUpgrade kernel-obs-qaUpgrade kernel-kvmsmallUpgrade kernel-develUpgrade dtb-sprdUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kselftests-kmp-rtUpgrade kernel-default-optionalUpgrade kernel-azure-livepatch-develUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-default | Jul 10, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-genericUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-raspiUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-nvidiaUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-gcpUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1013-awsUpgrade linux-image-oracle-64kUpgrade linux-image-kvmUpgrade linux-image-generic-64kUpgrade linux-image-azureUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-24.04Upgrade linux-image-ibmUpgrade linux-image-gkeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-virtual | Aug 9, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub