In the Linux kernel, the following vulnerability has been resolved:
drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
The perf tool allows users to create event groups through following cmd [1], but the driver does not check whether the array index is out of bounds when writing data to the event_group array. If the number of events in an event_group is greater than HNS3_PMU_MAX_HW_EVENTS, the memory write overflow of event_group array occurs.
Add array index check to fix the possible array out of bounds violation, and return directly when write new events are written to array bounds.
There are 9 different events in an event_group. [1] perf stat -e '{pmu/event1/, ... ,pmu/event9/}
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extra-commonUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-libbpfUpgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade bpftoolUpgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.94-99.176Upgrade kernel-libbpf-static | Feb 17, 2025 | Jun 19, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade kernel-rt_debug-livepatch-develUpgrade dtb-sprdUpgrade kernel-azure-livepatch-develUpgrade dlm-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-azure-develUpgrade kernel-rt-livepatchUpgrade dtb-xilinxUpgrade kernel-debug-livepatch-develUpgrade kernel-develUpgrade kernel-kvmsmallUpgrade kernel-default-extraUpgrade kernel-rtUpgrade dtb-apmUpgrade ocfs2-kmp-rtUpgrade kernel-default-vdsoUpgrade kernel-rt-develUpgrade kernel-syms-azureUpgrade ocfs2-kmp-azureUpgrade dtb-armUpgrade kernel-debugUpgrade kernel-devel-rtUpgrade kernel-obs-qaUpgrade kselftests-kmp-rtUpgrade dlm-kmp-rtUpgrade kernel-64kb-extraUpgrade kernel-64kb-develUpgrade dtb-nvidiaUpgrade kernel-docsUpgrade kernel-symsUpgrade cluster-md-kmp-rtUpgrade kernel-defaultUpgrade dtb-amlogicUpgrade dtb-rockchipUpgrade kernel-default-base-rebuildUpgrade dtb-qcomUpgrade cluster-md-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-default-baseUpgrade reiserfs-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-macrosUpgrade kselftests-kmp-defaultUpgrade dtb-mediatekUpgrade dtb-amdUpgrade kernel-source-azureUpgrade reiserfs-kmp-rtUpgrade dtb-hisiliconUpgrade dtb-alteraUpgrade dtb-exynosUpgrade dtb-lgUpgrade kernel-syms-rtUpgrade kernel-default-develUpgrade kernel-debug-develUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kernel-obs-buildUpgrade kernel-docs-htmlUpgrade kernel-default-livepatchUpgrade dtb-socionextUpgrade kselftests-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-rt_debugUpgrade dtb-allwinnerUpgrade kernel-kvmsmall-vdsoUpgrade dtb-renesasUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade dtb-broadcomUpgrade kernel-rt-vdsoUpgrade kernel-rt-extraUpgrade dlm-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-rt_debug-develUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade dtb-marvellUpgrade dtb-amazonUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-rt-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-debug-vdsoUpgrade kernel-64kb-optionalUpgrade kernel-64kbUpgrade gfs2-kmp-rtUpgrade kernel-sourceUpgrade kernel-rt-optionalUpgrade kernel-azure-optionalUpgrade gfs2-kmp-64kbUpgrade dtb-caviumUpgrade dtb-appleUpgrade kernel-azureUpgrade kernel-azure-extra | Jul 10, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-nvidia-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-genericUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-awsUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1010-oemUpgrade linux-image-virtualUpgrade linux-image-gkeUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04Upgrade linux-image-azureUpgrade linux-image-oem-24.04a | Aug 9, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub