In the Linux kernel, the following vulnerability has been resolved:
net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
The hns3 driver define an array of string to show the coalesce info, but if the kernel adds a new mode or a new state, out-of-bounds access may occur when coalesce info is read via debugfs, this patch fix the problem.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Oct 9, 2024 | May 21, 2024 |
| Suse | — | Upgrade kernel-rt-optionalUpgrade dtb-allwinnerUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-azureUpgrade dtb-exynosUpgrade kernel-64kb-optionalUpgrade kernel-source-azureUpgrade kernel-source-rtUpgrade dtb-freescaleUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debugUpgrade kernel-default-livepatchUpgrade kernel-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-devel-azureUpgrade dtb-broadcomUpgrade dtb-lgUpgrade kernel-azure-extraUpgrade kernel-docs-htmlUpgrade dtb-appleUpgrade kernel-default-develUpgrade kernel-rt-extraUpgrade kselftests-kmp-azureUpgrade dtb-alteraUpgrade kernel-obs-buildUpgrade kernel-default-vdsoUpgrade kernel-rt-vdsoUpgrade dtb-amdUpgrade kernel-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-debug-develUpgrade kernel-source-vanillaUpgrade dtb-socionextUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt_debug-develUpgrade kernel-64kb-extraUpgrade kernel-debug-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-syms-azureUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade dtb-caviumUpgrade dtb-renesasUpgrade gfs2-kmp-defaultUpgrade dtb-marvellUpgrade kselftests-kmp-64kbUpgrade kernel-sourceUpgrade dtb-amazonUpgrade dtb-sprdUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-64kbUpgrade kernel-azure-develUpgrade kernel-azure-vdsoUpgrade kernel-default-livepatch-develUpgrade kernel-kvmsmallUpgrade kselftests-kmp-rtUpgrade dtb-qcomUpgrade kernel-symsUpgrade dtb-xilinxUpgrade gfs2-kmp-64kbUpgrade kernel-defaultUpgrade dtb-armUpgrade dlm-kmp-rtUpgrade kernel-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-devel-rtUpgrade ocfs2-kmp-azureUpgrade kernel-macrosUpgrade kernel-debug-livepatch-develUpgrade kernel-develUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-zfcpdumpUpgrade dlm-kmp-azureUpgrade kernel-rt-develUpgrade ocfs2-kmp-rtUpgrade kernel-64kb-develUpgrade dtb-amlogicUpgrade cluster-md-kmp-defaultUpgrade dtb-rockchipUpgrade kernel-docsUpgrade kernel-obs-qaUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-debugUpgrade reiserfs-kmp-rtUpgrade dtb-mediatekUpgrade dtb-apmUpgrade dlm-kmp-defaultUpgrade dtb-nvidiaUpgrade kernel-rt-livepatchUpgrade dtb-hisiliconUpgrade kernel-default-extraUpgrade kernel-default-baseUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-defaultUpgrade kernel-default-optional | Jun 13, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-nvidia-6.5 | Nov 19, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub