In the Linux kernel, the following vulnerability has been resolved:
drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
The perf tool allows users to create event groups through following cmd [1], but the driver does not check whether the array index is out of bounds when writing data to the event_group array. If the number of events in an event_group is greater than HISI_PCIE_MAX_COUNTERS, the memory write overflow of event_group array occurs.
Add array index check to fix the possible array out of bounds violation, and return directly when write new events are written to array bounds.
There are 9 different events in an event_group. [1] perf stat -e '{pmu/event1/, ... ,pmu/event9/}'
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-toolsUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extra-commonUpgrade perf-debuginfoUpgrade kernel-livepatch-6.1.94-99.176Upgrade bpftool-debuginfoUpgrade perfUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-libbpf-develUpgrade kernel-libbpfUpgrade kernel-tools-debuginfo | Mar 27, 2025 | Jun 19, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade kernel-default-develUpgrade kernel-default-optionalUpgrade kernel-rt-develUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-rtUpgrade dtb-amdUpgrade reiserfs-kmp-defaultUpgrade dtb-sprdUpgrade gfs2-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade dtb-alteraUpgrade kernel-rt_debug-develUpgrade kernel-azure-optionalUpgrade kernel-docsUpgrade dlm-kmp-rtUpgrade kernel-devel-rtUpgrade dtb-nvidiaUpgrade dtb-amazonUpgrade gfs2-kmp-64kbUpgrade dtb-freescaleUpgrade dtb-xilinxUpgrade kernel-64kb-livepatch-develUpgrade dtb-allwinnerUpgrade kernel-64kb-optionalUpgrade kernel-64kbUpgrade kernel-64kb-develUpgrade kernel-debugUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-appleUpgrade dtb-mediatekUpgrade dtb-armUpgrade gfs2-kmp-azureUpgrade dtb-socionextUpgrade kernel-default-baseUpgrade dtb-hisiliconUpgrade kernel-source-vanillaUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-defaultUpgrade kernel-azureUpgrade dtb-caviumUpgrade kernel-kvmsmall-livepatch-develUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-defaultUpgrade kernel-symsUpgrade kernel-azure-extraUpgrade dtb-renesasUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade dtb-rockchipUpgrade kernel-debug-vdsoUpgrade kernel-obs-buildUpgrade kernel-azure-develUpgrade kernel-rt-optionalUpgrade dtb-broadcomUpgrade kernel-kvmsmall-develUpgrade kernel-docs-htmlUpgrade dtb-marvellUpgrade kernel-syms-rtUpgrade kernel-devel-azureUpgrade ocfs2-kmp-rtUpgrade kernel-syms-azureUpgrade kernel-default-vdsoUpgrade dlm-kmp-64kbUpgrade kernel-azure-vdsoUpgrade dtb-exynosUpgrade dtb-amlogicUpgrade kernel-source-rtUpgrade kernel-obs-qaUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-default-extraUpgrade dlm-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-default-base-rebuildUpgrade dtb-lgUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-extraUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmallUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-sourceUpgrade kselftests-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-macrosUpgrade dtb-qcomUpgrade kernel-source-azureUpgrade kernel-debug-livepatch-develUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-rtUpgrade kernel-rt-vdso | Jul 23, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-genericUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-generic-64kUpgrade linux-image-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-azure-fdeUpgrade linux-image-virtualUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gcpUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1010-oemUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-kvmUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-raspiUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-gkeUpgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-azureUpgrade linux-image-aws | Aug 9, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub