In the Linux kernel, the following vulnerability has been resolved:
ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port()
The if statement: if (port >= DSAF_GE_NUM) return;
limits the value of port less than DSAF_GE_NUM (i.e., 8). However, if the value of port is 6 or 7, an array overflow could occur: port_rst_off = dsaf_dev->mac_cb[port]->port_rst_off;
because the length of dsaf_dev->mac_cb is DSAF_MAX_PORT_NUM (i.e., 6).
To fix this possible array overflow, we first check port and if it is greater than or equal to DSAF_MAX_PORT_NUM, the function returns.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-devel-matchedUpgrade kernel-rt-develUpgrade kernel-rt-coreUpgrade kernel-rt-debug-coreUpgrade kernel-64k-debug-coreUpgrade kernel-cross-headersUpgrade kernel-64kUpgrade kernel-debug-modulesUpgrade kernel-tools-libs-develUpgrade kernel-64k-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-kvmUpgrade kernel-rt-modules-extraUpgrade python3-perfUpgrade kernel-64k-modules-coreUpgrade kernelUpgrade rtlaUpgrade kernel-develUpgrade kernel-64k-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-64k-modulesUpgrade bpftoolUpgrade kernel-64k-debugUpgrade kernel-64k-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-coreUpgrade rvUpgrade kernel-debug-coreUpgrade kernel-docUpgrade kernel-debug-uki-virtUpgrade kernel-64k-debug-modules-coreUpgrade perfUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-develUpgrade kernel-toolsUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-develUpgrade kernel-debug-modules-coreUpgrade kernel-64k-debug-develUpgrade kernel-modules-extraUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-coreUpgrade kernel-rtUpgrade libperfUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-abi-stablelistsUpgrade kernel-devel-matchedUpgrade kernel-uki-virtUpgrade kernel-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-debugUpgrade kernel-64k-debug-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-debug-devel-matched | Aug 12, 2024 | May 24, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-livepatch-4.14.262-200.489Upgrade python-perfUpgrade perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-livepatch-5.10.93-87.444Upgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade kernelUpgrade bpftool | Nov 12, 2024 | May 24, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 24, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perf | Oct 8, 2024 | May 24, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade kernel-headersUpgrade bpftoolUpgrade python-perfUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel | Jan 21, 2025 | May 24, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perf | Oct 8, 2024 | May 24, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 24, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Jul 16, 2024 | May 24, 2024 |
| Rocky_linux | — | Upgrade kernel-debug-coreUpgrade kernel-headersUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-modules-extraUpgrade kernelUpgrade kernel-debug-uki-virtUpgrade kernel-debugUpgrade python3-perf-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-debug-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-rtUpgrade kernel-debug-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-modulesUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-coreUpgrade kernel-coreUpgrade kernel-rt-modules-coreUpgrade kernel-cross-headersUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade kernel-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-zfcpdumpUpgrade kernel-rt-develUpgrade kernel-rt-debug-coreUpgrade kernel-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-devel-matchedUpgrade rtlaUpgrade kernel-uki-virtUpgrade kernel-rt-debug-develUpgrade rvUpgrade kernel-rt-coreUpgrade kernel-develUpgrade kernel-tools-libs-develUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade libperfUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-modules-coreUpgrade perf-debuginfoUpgrade libperf-debuginfoUpgrade python3-perfUpgrade perf | Jul 29, 2024 | May 24, 2024 |
| Suse | — | Upgrade kernel-rt-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade kernel-develUpgrade dtb-apmUpgrade dtb-qcomUpgrade kernel-default-extraUpgrade dlm-kmp-defaultUpgrade kernel-default-manUpgrade ocfs2-kmp-rtUpgrade dtb-socionextUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-64kb-develUpgrade kernel-rtUpgrade kernel-kvmsmallUpgrade kernel-rt_debug-vdsoUpgrade dtb-xilinxUpgrade reiserfs-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-syms-rtUpgrade dtb-nvidiaUpgrade kernel-macrosUpgrade dtb-hisiliconUpgrade kernel-debugUpgrade kernel-symsUpgrade kselftests-kmp-defaultUpgrade dtb-mediatekUpgrade dtb-amlogicUpgrade kernel-defaultUpgrade dlm-kmp-azureUpgrade kernel-azure-vdsoUpgrade dtb-armUpgrade kernel-docsUpgrade kernel-rt-livepatchUpgrade gfs2-kmp-64kbUpgrade kernel-devel-rtUpgrade dtb-rockchipUpgrade reiserfs-kmp-rtUpgrade kernel-default-baseUpgrade kernel-default-optionalUpgrade kernel-rt-develUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-rtUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-rt_debugUpgrade gfs2-kmp-azureUpgrade kernel-devel-azureUpgrade kernel-rt-extraUpgrade kernel-syms-azureUpgrade dtb-alteraUpgrade kernel-obs-buildUpgrade dtb-amazonUpgrade kernel-azure-develUpgrade kernel-docs-htmlUpgrade kernel-source-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debug-develUpgrade dtb-caviumUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-zfcpdumpUpgrade dtb-exynosUpgrade cluster-md-kmp-azureUpgrade kernel-debug-vdsoUpgrade dtb-freescaleUpgrade kernel-azure-extraUpgrade kselftests-kmp-64kbUpgrade kernel-default-vdsoUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-64kbUpgrade dtb-sprdUpgrade dtb-broadcomUpgrade dtb-allwinnerUpgrade dtb-renesasUpgrade dtb-lgUpgrade kernel-azure-optionalUpgrade kselftests-kmp-azureUpgrade kernel-64kbUpgrade kernel-default-livepatchUpgrade kernel-azure-baseUpgrade kernel-64kb-optionalUpgrade kernel-rt-optionalUpgrade kernel-default-develUpgrade kernel-rt_debug-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade dtb-appleUpgrade dtb-marvellUpgrade kernel-azureUpgrade dtb-amdUpgrade kernel-sourceUpgrade kernel-rt-vdso | Aug 9, 2024 | May 24, 2024 |
| Ubuntu | — | Upgrade linux-raspi-5.4Upgrade linux-bluefieldUpgrade linux-gcp-4.15Upgrade linux-azure-5.4Upgrade linux-hweUpgrade linux-ibm-5.4Upgrade linuxUpgrade linux-azure-4.15Upgrade linux-awsUpgrade linux-gcp-fipsUpgrade linux-azureUpgrade linux-oracleUpgrade linux-gcp-5.4Upgrade linux-fipsUpgrade linux-raspiUpgrade linux-kvmUpgrade linux-aws-hweUpgrade linux-gkeopUpgrade linux-hwe-5.4Upgrade linux-azure-fipsUpgrade linux-ibmUpgrade linux-oracle-5.4Upgrade linux-aws-fipsUpgrade linux-gcpUpgrade linux-aws-5.4 | Nov 19, 2024 | May 24, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | May 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub