In the Linux kernel, the following vulnerability has been resolved:
ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port()
The if statement: if (port >= DSAF_GE_NUM) return;
limits the value of port less than DSAF_GE_NUM (i.e., 8). However, if the value of port is 6 or 7, an array overflow could occur: port_rst_off = dsaf_dev->mac_cb[port]->port_rst_off;
because the length of dsaf_dev->mac_cb is DSAF_MAX_PORT_NUM (i.e., 6).
To fix this possible array overflow, we first check port and if it is greater than or equal to DSAF_MAX_PORT_NUM, the function returns.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-modules-coreUpgrade kernel-headersUpgrade kernel-64k-coreUpgrade bpftoolUpgrade kernel-rt-kvmUpgrade kernel-64k-devel-matchedUpgrade kernel-develUpgrade kernel-rt-coreUpgrade kernel-64k-debug-modules-extraUpgrade rtlaUpgrade kernel-rt-modules-extraUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade kernel-64k-debug-coreUpgrade kernel-rt-develUpgrade kernel-debug-devel-matchedUpgrade kernel-64kUpgrade kernelUpgrade kernel-rt-debug-coreUpgrade kernel-debug-develUpgrade kernel-cross-headersUpgrade kernel-debug-modulesUpgrade kernel-64k-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debugUpgrade kernel-64k-debug-modules-coreUpgrade kernel-docUpgrade kernel-rt-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-debug-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-debugUpgrade rvUpgrade kernel-rt-modules-coreUpgrade kernel-coreUpgrade kernel-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-rtUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-64k-modules-extraUpgrade kernel-uki-virtUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-debug-develUpgrade kernel-toolsUpgrade kernel-zfcpdump-modules-extraUpgrade libperfUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-develUpgrade kernel-modulesUpgrade kernel-rt-debug-kvmUpgrade perfUpgrade kernel-debugUpgrade kernel-rt-debug-modules-extraUpgrade kernel-devel-matched | Aug 12, 2024 | May 24, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade python-perf-debuginfoUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-5.10.93-87.444Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-4.14.262-200.489Upgrade python-perfUpgrade perf | Nov 12, 2024 | May 24, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 24, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perf | Oct 8, 2024 | May 24, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-develUpgrade python-perfUpgrade kernel | Jan 21, 2025 | May 24, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel | Oct 8, 2024 | May 24, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 24, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Jul 16, 2024 | May 24, 2024 |
| Rocky_linux | — | Upgrade kernelUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-develUpgrade kernel-headersUpgrade kernel-rtUpgrade bpftoolUpgrade kernel-rt-kvmUpgrade kernel-debugUpgrade kernel-debug-modules-coreUpgrade python3-perf-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modulesUpgrade kernel-cross-headersUpgrade kernel-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debugUpgrade bpftool-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modules-coreUpgrade libperfUpgrade kernel-rt-coreUpgrade perfUpgrade kernel-debug-devel-matchedUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade kernel-modules-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-uki-virtUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-develUpgrade rvUpgrade rtlaUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-devel-matchedUpgrade python3-perfUpgrade perf-debuginfoUpgrade libperf-debuginfo | Jul 29, 2024 | May 24, 2024 |
| Suse | — | Upgrade kernel-azure-develUpgrade dtb-renesasUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-default-livepatchUpgrade kernel-rt-optionalUpgrade kernel-source-azureUpgrade dtb-alteraUpgrade kernel-azure-optionalUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-vdsoUpgrade dtb-freescaleUpgrade dtb-allwinnerUpgrade dtb-amdUpgrade kernel-default-vdsoUpgrade kernel-azure-extraUpgrade reiserfs-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-azureUpgrade dtb-sprdUpgrade kselftests-kmp-64kbUpgrade dtb-exynosUpgrade ocfs2-kmp-azureUpgrade dtb-caviumUpgrade kernel-debug-vdsoUpgrade kernel-rt_debug-develUpgrade kernel-source-vanillaUpgrade dlm-kmp-64kbUpgrade kernel-debug-develUpgrade kernel-kvmsmall-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-64kbUpgrade kernel-64kb-optionalUpgrade kernel-azure-baseUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-develUpgrade kernel-rt_debugUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-appleUpgrade gfs2-kmp-azureUpgrade kernel-default-develUpgrade ocfs2-kmp-64kbUpgrade dtb-lgUpgrade kernel-64kb-extraUpgrade kernel-rt-vdsoUpgrade kernel-sourceUpgrade kernel-devel-azureUpgrade kernel-rt-extraUpgrade dtb-amazonUpgrade dtb-marvellUpgrade kernel-azureUpgrade kernel-obs-buildUpgrade ocfs2-kmp-rtUpgrade kernel-debugUpgrade dtb-hisiliconUpgrade kselftests-kmp-rtUpgrade kernel-default-manUpgrade dtb-qcomUpgrade dlm-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-azure-livepatch-develUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-rtUpgrade dtb-nvidiaUpgrade reiserfs-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmallUpgrade dtb-xilinxUpgrade kernel-develUpgrade dtb-socionextUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade dtb-apmUpgrade kernel-rt-develUpgrade kernel-default-extraUpgrade kernel-rtUpgrade kernel-macrosUpgrade kernel-rt-livepatch-develUpgrade kernel-docsUpgrade dtb-rockchipUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-default-optionalUpgrade kernel-symsUpgrade gfs2-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade dtb-mediatekUpgrade dlm-kmp-rtUpgrade kernel-syms-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-devel-rtUpgrade dtb-armUpgrade kernel-rt-livepatchUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-azureUpgrade dtb-amlogicUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-devel | Aug 9, 2024 | May 24, 2024 |
| Ubuntu | — | Upgrade linux-ibm-5.4Upgrade linux-awsUpgrade linux-gcp-fipsUpgrade linux-hweUpgrade linux-bluefieldUpgrade linux-azureUpgrade linuxUpgrade linux-azure-4.15Upgrade linux-gcp-4.15Upgrade linux-raspi-5.4Upgrade linux-azure-5.4Upgrade linux-kvmUpgrade linux-hwe-5.4Upgrade linux-ibmUpgrade linux-gcpUpgrade linux-azure-fipsUpgrade linux-aws-fipsUpgrade linux-gkeopUpgrade linux-oracleUpgrade linux-aws-hweUpgrade linux-raspiUpgrade linux-oracle-5.4Upgrade linux-aws-5.4Upgrade linux-fipsUpgrade linux-gcp-5.4 | Nov 19, 2024 | May 24, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | May 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub