In the Linux kernel, the following vulnerability has been resolved:
drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
The perf tool allows users to create event groups through following cmd [1], but the driver does not check whether the array index is out of bounds when writing data to the event_group array. If the number of events in an event_group is greater than HNS3_PMU_MAX_HW_EVENTS, the memory write overflow of event_group array occurs.
Add array index check to fix the possible array out of bounds violation, and return directly when write new events are written to array bounds.
There are 9 different events in an event_group. [1] perf stat -e '{pmu/event1/, ... ,pmu/event9/}
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade bpftoolUpgrade kernel-libbpfUpgrade python3-perfUpgrade kernel-livepatch-6.1.94-99.176Upgrade kernel-libbpf-staticUpgrade kernel-modules-extraUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf-debuginfoUpgrade kernel-tools-develUpgrade kernelUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headers | Feb 17, 2025 | Jun 19, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade dtb-broadcomUpgrade kernel-rt-vdsoUpgrade kernel-rt-extraUpgrade dtb-alteraUpgrade kernel-debug-develUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade dtb-amdUpgrade dtb-lgUpgrade dtb-marvellUpgrade kernel-default-develUpgrade kernel-syms-rtUpgrade dtb-amazonUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kernel-rt_debug-develUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-default-livepatch-develUpgrade kernel-zfcpdumpUpgrade kernel-source-rtUpgrade kernel-kvmsmall-develUpgrade dtb-appleUpgrade dtb-freescaleUpgrade kernel-64kbUpgrade kernel-azure-extraUpgrade kernel-debug-vdsoUpgrade dtb-exynosUpgrade kernel-azureUpgrade kernel-azure-optionalUpgrade kernel-rt-optionalUpgrade kernel-64kb-optionalUpgrade kernel-source-azureUpgrade dtb-hisiliconUpgrade gfs2-kmp-rtUpgrade kernel-sourceUpgrade gfs2-kmp-64kbUpgrade dtb-caviumUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debugUpgrade kernel-source-vanillaUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade dtb-allwinnerUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-renesasUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kernel-obs-buildUpgrade dtb-socionextUpgrade kernel-docs-htmlUpgrade kernel-default-livepatchUpgrade reiserfs-kmp-64kbUpgrade kernel-devel-azureUpgrade dtb-mediatekUpgrade kernel-symsUpgrade cluster-md-kmp-rtUpgrade kernel-rtUpgrade kernel-64kb-develUpgrade kernel-default-extraUpgrade dtb-armUpgrade dtb-apmUpgrade kernel-syms-azureUpgrade kernel-rt-develUpgrade kernel-default-vdsoUpgrade dlm-kmp-defaultUpgrade kernel-azure-livepatch-develUpgrade kselftests-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-develUpgrade kernel-obs-qaUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade dtb-sprdUpgrade kernel-kvmsmallUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-optionalUpgrade dtb-nvidiaUpgrade dlm-kmp-azureUpgrade dtb-xilinxUpgrade kernel-rt_debug-vdsoUpgrade kernel-macrosUpgrade kernel-debugUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-azureUpgrade kernel-azure-develUpgrade kernel-rt-livepatchUpgrade ocfs2-kmp-rtUpgrade kernel-devel-rtUpgrade dtb-rockchipUpgrade kernel-default-base-rebuildUpgrade kernel-default-baseUpgrade dlm-kmp-rtUpgrade dtb-qcomUpgrade cluster-md-kmp-64kbUpgrade kernel-defaultUpgrade dtb-amlogicUpgrade kselftests-kmp-defaultUpgrade kernel-docs | Jul 10, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-24.04Upgrade linux-image-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-kvmUpgrade linux-image-ibm-classicUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-azureUpgrade linux-image-gkeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-ibmUpgrade linux-image-virtualUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1010-oemUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1012-azureUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-6.8.0-40-generic | Aug 9, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub