In the Linux kernel, the following vulnerability has been resolved:
net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
The hns3 driver define an array of string to show the coalesce info, but if the kernel adds a new mode or a new state, out-of-bounds access may occur when coalesce info is read via debugfs, this patch fix the problem.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade bpftool | Oct 9, 2024 | May 21, 2024 |
| Suse | — | Upgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-rtUpgrade kernel-obs-qaUpgrade ocfs2-kmp-rtUpgrade dtb-rockchipUpgrade gfs2-kmp-64kbUpgrade kernel-docsUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-rtUpgrade dtb-apmUpgrade reiserfs-kmp-azureUpgrade dtb-qcomUpgrade kernel-macrosUpgrade kernel-rt-develUpgrade kernel-zfcpdumpUpgrade dtb-mediatekUpgrade dlm-kmp-rtUpgrade dlm-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-64kb-livepatch-develUpgrade kernel-rtUpgrade dlm-kmp-defaultUpgrade dtb-amlogicUpgrade dtb-armUpgrade kernel-default-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-symsUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-debugUpgrade kernel-syms-rtUpgrade dtb-xilinxUpgrade kernel-default-base-rebuildUpgrade dtb-hisiliconUpgrade kernel-debug-livepatch-develUpgrade kernel-default-optionalUpgrade kernel-develUpgrade kernel-default-baseUpgrade reiserfs-kmp-defaultUpgrade kernel-defaultUpgrade ocfs2-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-rt-livepatchUpgrade kernel-devel-rtUpgrade dtb-broadcomUpgrade kernel-azureUpgrade dtb-amdUpgrade kernel-64kbUpgrade dtb-allwinnerUpgrade kernel-source-vanillaUpgrade kernel-64kb-optionalUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade kernel-source-rtUpgrade kernel-syms-azureUpgrade dtb-socionextUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-obs-buildUpgrade kernel-docs-htmlUpgrade kernel-azure-extraUpgrade kernel-default-develUpgrade dtb-alteraUpgrade kselftests-kmp-azureUpgrade dtb-appleUpgrade dtb-caviumUpgrade kernel-rt_debugUpgrade kernel-debug-develUpgrade dtb-freescaleUpgrade cluster-md-kmp-azureUpgrade dtb-lgUpgrade dtb-exynosUpgrade kernel-rt-optionalUpgrade kernel-64kb-extraUpgrade kernel-azure-vdsoUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kernel-default-vdsoUpgrade dtb-amazonUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-kvmsmall-develUpgrade dtb-marvellUpgrade kernel-debug-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-default-livepatchUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-develUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade dtb-renesasUpgrade cluster-md-kmp-64kbUpgrade dtb-sprdUpgrade kernel-rt_debug-develUpgrade kernel-azure-optional | Jun 13, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-nvidia-6.5 | Nov 19, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub