In the Linux kernel, the following vulnerability has been resolved:
phy: marvell: a3700-comphy: Fix out of bounds read
There is an out of bounds read access of 'gbe_phy_init_fix[fix_idx].addr' every iteration after 'fix_idx' reaches 'ARRAY_SIZE(gbe_phy_init_fix)'.
Make sure 'gbe_phy_init[addr]' is used when all elements of 'gbe_phy_init_fix' array are handled.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 20, 2024 |
| Suse | — | Upgrade dtb-marvellUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-64kbUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-obs-buildUpgrade kernel-rt-optionalUpgrade kernel-rt-livepatch-develUpgrade kernel-azureUpgrade kernel-default-livepatchUpgrade dtb-amdUpgrade kernel-rt-extraUpgrade kernel-azure-extraUpgrade kernel-default-develUpgrade kernel-source-vanillaUpgrade kselftests-kmp-azureUpgrade dtb-exynosUpgrade dtb-caviumUpgrade kernel-debug-vdsoUpgrade kernel-source-rtUpgrade reiserfs-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-rtUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-64kbUpgrade kernel-debug-livepatch-develUpgrade dtb-amlogicUpgrade dtb-socionextUpgrade kernel-azure-vdsoUpgrade dtb-freescaleUpgrade dtb-appleUpgrade dlm-kmp-64kbUpgrade kernel-azure-develUpgrade dtb-broadcomUpgrade reiserfs-kmp-64kbUpgrade dtb-sprdUpgrade kernel-rt_debugUpgrade kernel-syms-rtUpgrade kernel-sourceUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-syms-azureUpgrade kernel-64kb-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade dtb-lgUpgrade kernel-rt-vdsoUpgrade kernel-default-baseUpgrade kernel-docs-htmlUpgrade kernel-source-azureUpgrade dlm-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-optionalUpgrade dtb-alteraUpgrade dtb-amazonUpgrade kernel-symsUpgrade dtb-rockchipUpgrade kernel-develUpgrade kernel-kvmsmallUpgrade kernel-default-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-develUpgrade dtb-hisiliconUpgrade dtb-allwinnerUpgrade kernel-debugUpgrade kernel-64kb-optionalUpgrade kernel-devel-azureUpgrade kernel-defaultUpgrade kernel-debug-develUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-rt-develUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-defaultUpgrade dtb-nvidiaUpgrade gfs2-kmp-rtUpgrade dtb-armUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-rtUpgrade dtb-qcomUpgrade dlm-kmp-azureUpgrade dtb-mediatekUpgrade kernel-obs-qaUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade dtb-apmUpgrade kernel-devel-rtUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-defaultUpgrade dtb-renesasUpgrade dtb-xilinxUpgrade kernel-zfcpdumpUpgrade kernel-macros | Jun 24, 2024 | May 20, 2024 |
| Ubuntu | — | Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-generic-64kUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1010-nvidiaUpgrade linux-image-6.8.0-39-lowlatency-64kUpgrade linux-image-6.8.0-39-lowlatencyUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1012-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-39-generic-64kUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-6.8.0-1009-ibmUpgrade linux-image-6.8.0-39-genericUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-kvmUpgrade linux-image-azure-fdeUpgrade linux-image-awsUpgrade linux-image-raspiUpgrade linux-image-gcpUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1010-nvidia-64kUpgrade linux-image-6.8.0-1012-awsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1007-gkeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1011-gcpUpgrade linux-image-oem-24.04aUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1008-raspiUpgrade linux-image-6.8.0-1009-oemUpgrade linux-image-ibmUpgrade linux-image-azureUpgrade linux-image-oracle-64k | Jul 31, 2024 | May 20, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub