In the Linux kernel, the following vulnerability has been resolved:
net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
The hns3 driver define an array of string to show the coalesce info, but if the kernel adds a new mode or a new state, out-of-bounds access may occur when coalesce info is read via debugfs, this patch fix the problem.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelists | Oct 9, 2024 | May 21, 2024 |
| Suse | — | Upgrade dtb-rockchipUpgrade kernel-docsUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-default-extraUpgrade dlm-kmp-defaultUpgrade kernel-azure-livepatch-develUpgrade kernel-zfcpdumpUpgrade dtb-xilinxUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade dtb-qcomUpgrade kernel-default-base-rebuildUpgrade kernel-symsUpgrade kernel-debugUpgrade kselftests-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade ocfs2-kmp-azureUpgrade kernel-develUpgrade reiserfs-kmp-rtUpgrade cluster-md-kmp-rtUpgrade kernel-macrosUpgrade kernel-syms-rtUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade dtb-mediatekUpgrade dlm-kmp-rtUpgrade dtb-armUpgrade reiserfs-kmp-defaultUpgrade kernel-defaultUpgrade kernel-64kb-develUpgrade kernel-default-optionalUpgrade dtb-hisiliconUpgrade reiserfs-kmp-azureUpgrade kernel-devel-rtUpgrade kernel-rt-livepatchUpgrade dtb-amlogicUpgrade kernel-rt-develUpgrade dtb-apmUpgrade dtb-nvidiaUpgrade kernel-rtUpgrade kernel-default-baseUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-livepatch-develUpgrade dlm-kmp-azureUpgrade dlm-kmp-64kbUpgrade kernel-devel-azureUpgrade dtb-amazonUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-optionalUpgrade kernel-source-rtUpgrade dtb-appleUpgrade kernel-rt-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-default-develUpgrade kernel-azure-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-default-vdsoUpgrade kernel-sourceUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade dtb-amdUpgrade kernel-syms-azureUpgrade kernel-rt_debug-develUpgrade kernel-azureUpgrade dtb-socionextUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-kvmsmall-develUpgrade dtb-marvellUpgrade kernel-debug-vdsoUpgrade kernel-64kb-extraUpgrade dtb-caviumUpgrade kernel-rt_debugUpgrade kernel-default-livepatchUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-alteraUpgrade kernel-azure-develUpgrade gfs2-kmp-defaultUpgrade dtb-renesasUpgrade dtb-sprdUpgrade dtb-lgUpgrade dtb-exynosUpgrade cluster-md-kmp-azureUpgrade dtb-freescaleUpgrade kernel-rt-optionalUpgrade kernel-debug-develUpgrade kernel-source-vanillaUpgrade kernel-64kbUpgrade dtb-broadcomUpgrade dtb-allwinnerUpgrade kernel-source-azureUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-azure-extraUpgrade kernel-rt-extraUpgrade kernel-obs-buildUpgrade ocfs2-kmp-defaultUpgrade kernel-docs-html | Jun 13, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-nvidia-6.5 | Nov 19, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub