In the Linux kernel, the following vulnerability has been resolved:
net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
The hns3 driver define an array of string to show the coalesce info, but if the kernel adds a new mode or a new state, out-of-bounds access may occur when coalesce info is read via debugfs, this patch fix the problem.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools | Oct 9, 2024 | May 21, 2024 |
| Suse | — | Upgrade kernel-rt-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-azure-extraUpgrade dtb-amazonUpgrade dtb-lgUpgrade kernel-source-vanillaUpgrade dtb-sprdUpgrade dtb-renesasUpgrade dtb-exynosUpgrade dtb-appleUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-64kb-optionalUpgrade dtb-broadcomUpgrade gfs2-kmp-defaultUpgrade kernel-default-vdsoUpgrade kernel-source-rtUpgrade kernel-rt-vdsoUpgrade kernel-syms-azureUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-vdsoUpgrade dtb-socionextUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-vdsoUpgrade kernel-devel-azureUpgrade kernel-azure-develUpgrade kernel-sourceUpgrade gfs2-kmp-azureUpgrade dtb-allwinnerUpgrade kernel-azureUpgrade kernel-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-caviumUpgrade dtb-amdUpgrade kernel-source-azureUpgrade kernel-kvmsmall-develUpgrade dtb-marvellUpgrade dtb-alteraUpgrade kernel-64kb-extraUpgrade kernel-obs-buildUpgrade kernel-default-develUpgrade kernel-debug-vdsoUpgrade kernel-rt-extraUpgrade kernel-azure-optionalUpgrade dtb-freescaleUpgrade kernel-docs-htmlUpgrade kselftests-kmp-azureUpgrade kernel-rt-optionalUpgrade reiserfs-kmp-64kbUpgrade kernel-debug-develUpgrade kernel-64kb-develUpgrade kernel-rt-livepatchUpgrade kernel-rt_debug-vdsoUpgrade dtb-mediatekUpgrade dtb-amlogicUpgrade kernel-default-baseUpgrade dlm-kmp-defaultUpgrade dtb-qcomUpgrade ocfs2-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-devel-rtUpgrade kernel-develUpgrade kernel-debug-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-rtUpgrade dtb-xilinxUpgrade kselftests-kmp-defaultUpgrade kernel-symsUpgrade cluster-md-kmp-defaultUpgrade kernel-debugUpgrade kernel-azure-livepatch-develUpgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-obs-qaUpgrade kselftests-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-default-optionalUpgrade kernel-defaultUpgrade dtb-hisiliconUpgrade dtb-armUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade dtb-rockchipUpgrade reiserfs-kmp-azureUpgrade kernel-zfcpdumpUpgrade dlm-kmp-azureUpgrade kernel-macrosUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-rtUpgrade kernel-rt-develUpgrade ocfs2-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-rtUpgrade gfs2-kmp-64kbUpgrade dtb-apmUpgrade dtb-nvidia | Jun 13, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-nvidia-6.5 | Nov 19, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub