In the Linux kernel, the following vulnerability has been resolved:
ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port()
The if statement: if (port >= DSAF_GE_NUM) return;
limits the value of port less than DSAF_GE_NUM (i.e., 8). However, if the value of port is 6 or 7, an array overflow could occur: port_rst_off = dsaf_dev->mac_cb[port]->port_rst_off;
because the length of dsaf_dev->mac_cb is DSAF_MAX_PORT_NUM (i.e., 6).
To fix this possible array overflow, we first check port and if it is greater than or equal to DSAF_MAX_PORT_NUM, the function returns.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-devel-matchedUpgrade rvUpgrade kernel-modules-extraUpgrade kernel-64k-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debug-modules-extraUpgrade perfUpgrade kernel-uki-virtUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-debugUpgrade kernel-debugUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-debug-modulesUpgrade libperfUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rtUpgrade kernel-tools-libsUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-debug-coreUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-kvmUpgrade kernel-docUpgrade kernel-abi-stablelistsUpgrade kernel-modulesUpgrade kernel-64k-debug-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-64k-develUpgrade kernel-modules-coreUpgrade kernel-rt-debugUpgrade kernel-toolsUpgrade kernel-coreUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-debug-modulesUpgrade kernel-debug-develUpgrade kernel-64kUpgrade kernel-64k-modulesUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-kvmUpgrade kernel-64k-debug-modules-extraUpgrade kernelUpgrade kernel-64k-modules-coreUpgrade bpftoolUpgrade kernel-rt-modules-extraUpgrade rtlaUpgrade python3-perfUpgrade kernel-64k-debug-coreUpgrade kernel-tools-libs-develUpgrade kernel-rt-develUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-coreUpgrade kernel-headersUpgrade kernel-rt-debug-coreUpgrade kernel-rt-coreUpgrade kernel-develUpgrade kernel-cross-headers | Aug 12, 2024 | May 24, 2024 |
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade python-perfUpgrade kernel-headersUpgrade kernel-livepatch-5.10.93-87.444Upgrade kernel-livepatch-4.14.262-200.489Upgrade kernel-toolsUpgrade perfUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-develUpgrade kernel | Nov 12, 2024 | May 24, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 24, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel | Oct 8, 2024 | May 24, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade kernel-headersUpgrade python-perfUpgrade bpftoolUpgrade kernel-develUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perf | Jan 21, 2025 | May 24, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel | Oct 8, 2024 | May 24, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 24, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jul 16, 2024 | May 24, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debug-develUpgrade perfUpgrade kernel-devel-matchedUpgrade kernel-uki-virtUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-modulesUpgrade rtlaUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade rvUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-develUpgrade kernel-toolsUpgrade libperfUpgrade perf-debuginfoUpgrade python3-perfUpgrade kernel-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-develUpgrade libperf-debuginfoUpgrade kernel-modulesUpgrade kernel-debug-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-coreUpgrade kernel-debug-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-develUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdumpUpgrade kernel-tools-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-kvmUpgrade kernel-rtUpgrade kernel-headersUpgrade kernel-debug-coreUpgrade kernelUpgrade kernel-debug-modules-coreUpgrade kernel-debugUpgrade kernel-modules-extraUpgrade kernel-cross-headersUpgrade kernel-rt-debugUpgrade kernel-rt-debug-debuginfoUpgrade bpftoolUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-debuginfo | Jul 29, 2024 | May 24, 2024 |
| Suse | — | Upgrade dlm-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-devel-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-default-manUpgrade dlm-kmp-defaultUpgrade kernel-defaultUpgrade kernel-azure-vdsoUpgrade kernel-obs-qaUpgrade kernel-develUpgrade dtb-rockchipUpgrade kernel-azure-livepatch-develUpgrade dlm-kmp-azureUpgrade dtb-armUpgrade kselftests-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-rtUpgrade kernel-64kb-develUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade dtb-mediatekUpgrade kernel-default-optionalUpgrade kernel-docsUpgrade reiserfs-kmp-defaultUpgrade dtb-socionextUpgrade kernel-symsUpgrade dtb-amlogicUpgrade ocfs2-kmp-rtUpgrade kernel-rt-develUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-rtUpgrade kernel-macrosUpgrade kernel-debugUpgrade kernel-rt-livepatchUpgrade dtb-hisiliconUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade dtb-xilinxUpgrade kernel-default-baseUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmallUpgrade dtb-nvidiaUpgrade reiserfs-kmp-rtUpgrade dtb-apmUpgrade gfs2-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-extraUpgrade dtb-qcomUpgrade kernel-debug-vdsoUpgrade dtb-lgUpgrade dtb-freescaleUpgrade kernel-zfcpdumpUpgrade kernel-rt-extraUpgrade kernel-default-livepatchUpgrade kernel-azure-develUpgrade dtb-allwinnerUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-defaultUpgrade dtb-broadcomUpgrade kernel-default-develUpgrade kernel-azure-baseUpgrade dtb-renesasUpgrade ocfs2-kmp-azureUpgrade dtb-exynosUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-source-rtUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-64kb-extraUpgrade dtb-caviumUpgrade kernel-debug-develUpgrade dtb-alteraUpgrade kselftests-kmp-azureUpgrade kernel-sourceUpgrade kernel-source-vanillaUpgrade kselftests-kmp-64kbUpgrade kernel-azureUpgrade kernel-obs-buildUpgrade kernel-rt-vdsoUpgrade kernel-source-azureUpgrade dtb-marvellUpgrade kernel-default-vdsoUpgrade kernel-devel-azureUpgrade kernel-azure-extraUpgrade dtb-sprdUpgrade kernel-syms-azureUpgrade gfs2-kmp-azureUpgrade dtb-amdUpgrade dtb-appleUpgrade kernel-rt_debugUpgrade dtb-amazonUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-64kbUpgrade kernel-64kb-optionalUpgrade kernel-rt-optionalUpgrade ocfs2-kmp-64kb | Aug 9, 2024 | May 24, 2024 |
| Ubuntu | — | Upgrade linux-oracle-5.4Upgrade linux-gcpUpgrade linux-azure-fipsUpgrade linux-hwe-5.4Upgrade linux-gcp-5.4Upgrade linux-ibmUpgrade linux-raspiUpgrade linux-gkeopUpgrade linux-aws-hweUpgrade linux-fipsUpgrade linux-aws-5.4Upgrade linux-oracleUpgrade linux-aws-fipsUpgrade linux-kvmUpgrade linuxUpgrade linux-azure-5.4Upgrade linux-gcp-4.15Upgrade linux-hweUpgrade linux-gcp-fipsUpgrade linux-ibm-5.4Upgrade linux-awsUpgrade linux-azure-4.15Upgrade linux-bluefieldUpgrade linux-azureUpgrade linux-raspi-5.4 | Nov 19, 2024 | May 24, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | May 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub