In the Linux kernel, the following vulnerability has been resolved:
ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port()
The if statement: if (port >= DSAF_GE_NUM) return;
limits the value of port less than DSAF_GE_NUM (i.e., 8). However, if the value of port is 6 or 7, an array overflow could occur: port_rst_off = dsaf_dev->mac_cb[port]->port_rst_off;
because the length of dsaf_dev->mac_cb is DSAF_MAX_PORT_NUM (i.e., 6).
To fix this possible array overflow, we first check port and if it is greater than or equal to DSAF_MAX_PORT_NUM, the function returns.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-kvmUpgrade perfUpgrade kernel-coreUpgrade kernel-uki-virtUpgrade kernel-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-64k-debug-develUpgrade kernel-tools-libsUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-abi-stablelistsUpgrade rvUpgrade kernel-zfcpdump-develUpgrade kernel-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-modules-coreUpgrade kernel-64k-debugUpgrade kernel-debugUpgrade kernel-zfcpdump-modulesUpgrade kernel-docUpgrade kernel-rtUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debugUpgrade libperfUpgrade kernel-64k-debug-modules-coreUpgrade kernel-toolsUpgrade kernel-64k-develUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-modulesUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-cross-headersUpgrade kernel-64kUpgrade bpftoolUpgrade kernel-tools-libs-develUpgrade kernel-develUpgrade kernel-rt-develUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-coreUpgrade kernel-64k-debug-modules-extraUpgrade python3-perfUpgrade rtlaUpgrade kernel-64k-debug-coreUpgrade kernel-rt-kvmUpgrade kernel-rt-modules-extraUpgrade kernel-headersUpgrade kernel-64k-modules-coreUpgrade kernel-64k-core | Aug 12, 2024 | May 24, 2024 |
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.93-87.444Upgrade kernel-debuginfoUpgrade python-perfUpgrade perfUpgrade kernel-livepatch-4.14.262-200.489Upgrade kernel-develUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-tools-develUpgrade python-perf-debuginfo | Nov 12, 2024 | May 24, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 24, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perf | Oct 8, 2024 | May 24, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-develUpgrade bpftoolUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-headers | Jan 21, 2025 | May 24, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | Oct 8, 2024 | May 24, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 24, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Jul 16, 2024 | May 24, 2024 |
| Rocky_linux | — | Upgrade kernel-tools-libsUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modulesUpgrade kernel-rt-debuginfoUpgrade kernelUpgrade kernel-debugUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-rtUpgrade kernel-rt-develUpgrade bpftoolUpgrade kernel-debug-coreUpgrade kernel-headersUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rt-modules-coreUpgrade kernel-coreUpgrade bpftool-debuginfoUpgrade kernel-debug-uki-virtUpgrade kernel-cross-headersUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-modules-extraUpgrade rtlaUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-devel-matchedUpgrade rvUpgrade kernel-devel-matchedUpgrade kernel-rt-coreUpgrade kernel-uki-virtUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-modules-coreUpgrade libperfUpgrade kernel-rt-debug-develUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-develUpgrade perf-debuginfoUpgrade libperf-debuginfoUpgrade python3-perfUpgrade perfUpgrade kernel-tools-libs-develUpgrade kernel-develUpgrade kernel-zfcpdump-devel | Jul 29, 2024 | May 24, 2024 |
| Suse | — | Upgrade kernel-azure-optionalUpgrade kernel-azure-baseUpgrade ocfs2-kmp-64kbUpgrade dtb-renesasUpgrade kernel-64kb-optionalUpgrade dtb-lgUpgrade dlm-kmp-64kbUpgrade kernel-devel-azureUpgrade kernel-rt-extraUpgrade kernel-rt-vdsoUpgrade gfs2-kmp-azureUpgrade kernel-sourceUpgrade kernel-source-azureUpgrade dtb-amazonUpgrade kernel-syms-azureUpgrade kernel-azure-develUpgrade kernel-rt_debugUpgrade kernel-default-develUpgrade dtb-appleUpgrade kernel-debug-develUpgrade kernel-obs-buildUpgrade kernel-64kb-extraUpgrade kernel-azureUpgrade dtb-amdUpgrade dtb-marvellUpgrade dtb-alteraUpgrade dtb-caviumUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-rtUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-azureUpgrade dtb-freescaleUpgrade ocfs2-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-rt-optionalUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-develUpgrade kernel-64kbUpgrade dtb-allwinnerUpgrade kernel-zfcpdumpUpgrade dtb-sprdUpgrade kernel-azure-extraUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-vdsoUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-debug-vdsoUpgrade dtb-exynosUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-syms-rtUpgrade kernel-defaultUpgrade kernel-default-manUpgrade cluster-md-kmp-defaultUpgrade kernel-devel-rtUpgrade dtb-qcomUpgrade kernel-debug-livepatch-develUpgrade dtb-mediatekUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade kernel-develUpgrade kernel-64kb-develUpgrade dtb-rockchipUpgrade kernel-obs-qaUpgrade dlm-kmp-rtUpgrade kernel-debugUpgrade kselftests-kmp-rtUpgrade kernel-rt-develUpgrade kernel-default-livepatch-develUpgrade dtb-hisiliconUpgrade kernel-rt-livepatchUpgrade dtb-socionextUpgrade kernel-macrosUpgrade dlm-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-defaultUpgrade kernel-symsUpgrade cluster-md-kmp-rtUpgrade kernel-default-baseUpgrade dtb-amlogicUpgrade dtb-xilinxUpgrade kselftests-kmp-defaultUpgrade kernel-rtUpgrade kernel-docsUpgrade kernel-rt-livepatch-develUpgrade kernel-default-extraUpgrade gfs2-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade dtb-armUpgrade dlm-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-rt_debug-vdsoUpgrade ocfs2-kmp-rtUpgrade dtb-apmUpgrade kernel-kvmsmallUpgrade dtb-nvidia | Aug 9, 2024 | May 24, 2024 |
| Ubuntu | — | Upgrade linux-azure-4.15Upgrade linux-raspi-5.4Upgrade linux-hweUpgrade linux-azure-5.4Upgrade linux-ibm-5.4Upgrade linux-awsUpgrade linux-gcp-fipsUpgrade linux-azureUpgrade linux-gcp-4.15Upgrade linuxUpgrade linux-bluefieldUpgrade linux-ibmUpgrade linux-azure-fipsUpgrade linux-aws-fipsUpgrade linux-hwe-5.4Upgrade linux-kvmUpgrade linux-oracleUpgrade linux-gcpUpgrade linux-gkeopUpgrade linux-aws-hweUpgrade linux-raspiUpgrade linux-aws-5.4Upgrade linux-oracle-5.4Upgrade linux-gcp-5.4Upgrade linux-fips | Nov 19, 2024 | May 24, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | May 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub