In the Linux kernel, the following vulnerability has been resolved:
ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port()
The if statement: if (port >= DSAF_GE_NUM) return;
limits the value of port less than DSAF_GE_NUM (i.e., 8). However, if the value of port is 6 or 7, an array overflow could occur: port_rst_off = dsaf_dev->mac_cb[port]->port_rst_off;
because the length of dsaf_dev->mac_cb is DSAF_MAX_PORT_NUM (i.e., 6).
To fix this possible array overflow, we first check port and if it is greater than or equal to DSAF_MAX_PORT_NUM, the function returns.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-coreUpgrade kernel-toolsUpgrade kernel-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-abi-stablelistsUpgrade libperfUpgrade kernel-64k-debug-develUpgrade kernel-zfcpdump-coreUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rtUpgrade kernel-rt-debug-modules-coreUpgrade kernel-tools-libsUpgrade kernel-uki-virtUpgrade kernel-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-64k-modules-extraUpgrade kernel-debug-coreUpgrade kernel-64k-develUpgrade kernel-rt-modules-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-rt-debugUpgrade kernel-debugUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-modules-coreUpgrade perfUpgrade kernel-debug-uki-virtUpgrade rvUpgrade kernel-64k-debugUpgrade kernel-docUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-modulesUpgrade kernel-64k-devel-matchedUpgrade rtlaUpgrade python3-perfUpgrade kernel-rt-modules-extraUpgrade kernel-rt-coreUpgrade kernel-develUpgrade bpftoolUpgrade kernel-debug-develUpgrade kernel-64k-debug-coreUpgrade kernelUpgrade kernel-64kUpgrade kernel-headersUpgrade kernel-debug-modulesUpgrade kernel-rt-kvmUpgrade kernel-rt-develUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-coreUpgrade kernel-64k-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-cross-headersUpgrade kernel-64k-modules | Aug 12, 2024 | May 24, 2024 |
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.93-87.444Upgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-4.14.262-200.489Upgrade bpftoolUpgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64 | Nov 12, 2024 | May 24, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 24, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Oct 8, 2024 | May 24, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade perfUpgrade kernel-develUpgrade kernelUpgrade python-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade python3-perf | Jan 21, 2025 | May 24, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | Oct 8, 2024 | May 24, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 24, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jul 16, 2024 | May 24, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debug-modules-coreUpgrade python3-perfUpgrade kernel-uki-virtUpgrade kernel-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-debuginfoUpgrade rvUpgrade kernel-devel-matchedUpgrade kernel-rt-coreUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade rtlaUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-develUpgrade libperf-debuginfoUpgrade perf-debuginfoUpgrade kernel-debug-devel-matchedUpgrade kernel-develUpgrade libperfUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modules-extraUpgrade perfUpgrade kernel-toolsUpgrade kernel-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-coreUpgrade kernel-rt-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-debuginfoUpgrade kernelUpgrade kernel-debugUpgrade kernel-tools-debuginfoUpgrade kernel-debug-modules-coreUpgrade python3-perf-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-headersUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-modulesUpgrade kernel-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debugUpgrade bpftool-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-cross-headersUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-coreUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debuginfoUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-kvmUpgrade kernel-rtUpgrade kernel-debug-coreUpgrade bpftoolUpgrade kernel-zfcpdumpUpgrade kernel-rt-modules-extra | Jul 29, 2024 | May 24, 2024 |
| Suse | — | Upgrade kernel-devel-rtUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt-livepatchUpgrade kernel-docsUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade dtb-armUpgrade dtb-mediatekUpgrade dlm-kmp-rtUpgrade kernel-obs-qaUpgrade dlm-kmp-azureUpgrade kernel-defaultUpgrade kernel-syms-rtUpgrade kselftests-kmp-rtUpgrade kernel-debugUpgrade kselftests-kmp-defaultUpgrade dtb-rockchipUpgrade kernel-default-optionalUpgrade kernel-rtUpgrade kernel-default-extraUpgrade kernel-symsUpgrade dtb-hisiliconUpgrade kernel-rt-develUpgrade dtb-qcomUpgrade dtb-apmUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-default-manUpgrade kernel-azure-livepatch-develUpgrade dtb-nvidiaUpgrade dtb-xilinxUpgrade kernel-64kb-develUpgrade kernel-rt_debug-vdsoUpgrade cluster-md-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-develUpgrade dtb-socionextUpgrade kernel-macrosUpgrade gfs2-kmp-64kbUpgrade dtb-amlogicUpgrade kernel-default-baseUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-azure-vdsoUpgrade kernel-azure-develUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-allwinnerUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-defaultUpgrade kernel-debug-vdsoUpgrade ocfs2-kmp-azureUpgrade kernel-sourceUpgrade kernel-azureUpgrade kernel-obs-buildUpgrade dtb-marvellUpgrade kernel-rt_debug-develUpgrade kernel-source-rtUpgrade kernel-rt-optionalUpgrade dtb-freescaleUpgrade kernel-rt_debugUpgrade kernel-rt-vdsoUpgrade kernel-rt-extraUpgrade kernel-devel-azureUpgrade dlm-kmp-64kbUpgrade dtb-appleUpgrade gfs2-kmp-defaultUpgrade kernel-source-azureUpgrade gfs2-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-docs-htmlUpgrade dtb-caviumUpgrade kernel-debug-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kb-extraUpgrade kernel-64kbUpgrade cluster-md-kmp-azureUpgrade dtb-exynosUpgrade kernel-zfcpdumpUpgrade dtb-amdUpgrade kernel-default-develUpgrade kernel-64kb-optionalUpgrade dtb-lgUpgrade dtb-renesasUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-azure-baseUpgrade dtb-sprdUpgrade kselftests-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-default-vdsoUpgrade kernel-azure-extraUpgrade reiserfs-kmp-64kbUpgrade dtb-broadcomUpgrade dtb-amazonUpgrade kernel-syms-azureUpgrade dtb-alteraUpgrade kselftests-kmp-azure | Aug 9, 2024 | May 24, 2024 |
| Ubuntu | — | Upgrade linux-azure-5.4Upgrade linux-hweUpgrade linux-raspi-5.4Upgrade linux-bluefieldUpgrade linux-gcp-fipsUpgrade linux-azureUpgrade linux-ibm-5.4Upgrade linuxUpgrade linux-awsUpgrade linux-gcp-4.15Upgrade linux-azure-4.15Upgrade linux-oracle-5.4Upgrade linux-aws-hweUpgrade linux-gkeopUpgrade linux-gcpUpgrade linux-oracleUpgrade linux-aws-fipsUpgrade linux-azure-fipsUpgrade linux-aws-5.4Upgrade linux-gcp-5.4Upgrade linux-hwe-5.4Upgrade linux-fipsUpgrade linux-kvmUpgrade linux-ibmUpgrade linux-raspi | Nov 19, 2024 | May 24, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | May 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub