In the Linux kernel, the following vulnerability has been resolved:
net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
The hns3 driver define an array of string to show the coalesce info, but if the kernel adds a new mode or a new state, out-of-bounds access may occur when coalesce info is read via debugfs, this patch fix the problem.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade bpftoolUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libs | Oct 9, 2024 | May 21, 2024 |
| Suse | — | Upgrade kernel-debug-vdsoUpgrade kernel-kvmsmall-develUpgrade dtb-exynosUpgrade dtb-caviumUpgrade dtb-marvellUpgrade kernel-source-vanillaUpgrade dtb-renesasUpgrade gfs2-kmp-defaultUpgrade kernel-sourceUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade kernel-64kb-extraUpgrade kernel-rt-optionalUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade dtb-amazonUpgrade dtb-broadcomUpgrade kernel-default-develUpgrade ocfs2-kmp-64kbUpgrade dtb-sprdUpgrade kernel-64kb-optionalUpgrade kernel-source-azureUpgrade dtb-allwinnerUpgrade gfs2-kmp-azureUpgrade kernel-64kbUpgrade kernel-azure-develUpgrade kernel-source-rtUpgrade kernel-rt_debugUpgrade dtb-alteraUpgrade cluster-md-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-obs-buildUpgrade dtb-appleUpgrade kernel-debug-develUpgrade kselftests-kmp-64kbUpgrade kernel-default-vdsoUpgrade kernel-rt-extraUpgrade kernel-rt-vdsoUpgrade kernel-azure-vdsoUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-lgUpgrade kselftests-kmp-azureUpgrade dtb-freescaleUpgrade kernel-syms-azureUpgrade dtb-amdUpgrade kernel-devel-azureUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-extraUpgrade dtb-socionextUpgrade kernel-azureUpgrade kernel-default-livepatchUpgrade kernel-docsUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade dtb-apmUpgrade kselftests-kmp-rtUpgrade kernel-obs-qaUpgrade dtb-rockchipUpgrade gfs2-kmp-64kbUpgrade dtb-qcomUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade dtb-mediatekUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-extraUpgrade dtb-nvidiaUpgrade dtb-amlogicUpgrade kernel-rt-livepatchUpgrade kselftests-kmp-defaultUpgrade kernel-symsUpgrade kernel-debugUpgrade kernel-default-base-rebuildUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-develUpgrade gfs2-kmp-rtUpgrade dtb-xilinxUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-default-baseUpgrade kernel-syms-rtUpgrade kernel-debug-livepatch-develUpgrade ocfs2-kmp-azureUpgrade kernel-devel-rtUpgrade kernel-develUpgrade dlm-kmp-azureUpgrade kernel-rt-develUpgrade dtb-hisiliconUpgrade kernel-defaultUpgrade dtb-armUpgrade dlm-kmp-rtUpgrade kernel-macrosUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-default-optionalUpgrade kernel-rt | Jun 13, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-nvidia-6.5 | Nov 19, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub