In the Linux kernel, the following vulnerability has been resolved:
drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
The perf tool allows users to create event groups through following cmd [1], but the driver does not check whether the array index is out of bounds when writing data to the event_group array. If the number of events in an event_group is greater than HISI_PCIE_MAX_COUNTERS, the memory write overflow of event_group array occurs.
Add array index check to fix the possible array out of bounds violation, and return directly when write new events are written to array bounds.
There are 9 different events in an event_group. [1] perf stat -e '{pmu/event1/, ... ,pmu/event9/}'
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extraUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-develUpgrade kernel-debuginfoUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-livepatch-6.1.94-99.176Upgrade kernel-libbpf-staticUpgrade kernel-tools | Mar 27, 2025 | Jun 19, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade gfs2-kmp-rtUpgrade kernel-source-azureUpgrade ocfs2-kmp-rtUpgrade dtb-broadcomUpgrade dtb-qcomUpgrade kernel-azure-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-docs-htmlUpgrade kernel-devel-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-azureUpgrade dtb-lgUpgrade kernel-default-base-rebuildUpgrade kernel-macrosUpgrade kernel-rt-vdsoUpgrade kernel-azure-develUpgrade dtb-apmUpgrade kernel-rtUpgrade kernel-debug-livepatch-develUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade dtb-rockchipUpgrade kernel-obs-qaUpgrade kernel-azure-vdsoUpgrade kernel-source-rtUpgrade kernel-default-livepatchUpgrade dtb-exynosUpgrade dtb-amlogicUpgrade kernel-obs-buildUpgrade kernel-rt_debugUpgrade kernel-rt-optionalUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-azureUpgrade kernel-default-vdsoUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-default-extraUpgrade kernel-rt-extraUpgrade kernel-zfcpdumpUpgrade kernel-syms-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-sourceUpgrade dtb-marvellUpgrade kselftests-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-azure-optionalUpgrade kernel-debugUpgrade kernel-64kb-optionalUpgrade kernel-64kb-livepatch-develUpgrade dtb-renesasUpgrade kernel-debug-develUpgrade dtb-appleUpgrade dtb-freescaleUpgrade kernel-docsUpgrade dtb-xilinxUpgrade dtb-allwinnerUpgrade cluster-md-kmp-rtUpgrade kernel-symsUpgrade kernel-azureUpgrade dtb-caviumUpgrade kernel-defaultUpgrade kernel-azure-extraUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-rt-develUpgrade kernel-default-optionalUpgrade kernel-default-develUpgrade dtb-amdUpgrade dtb-alteraUpgrade ocfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade kernel-devel-rtUpgrade gfs2-kmp-azureUpgrade dtb-hisiliconUpgrade dtb-amazonUpgrade kernel-64kb-develUpgrade dtb-nvidiaUpgrade kernel-rt_debug-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-defaultUpgrade dtb-sprdUpgrade kernel-64kbUpgrade dtb-mediatekUpgrade kernel-64kb-extraUpgrade kernel-develUpgrade kernel-rt_debug-develUpgrade dtb-socionextUpgrade dtb-armUpgrade kernel-default-baseUpgrade dlm-kmp-defaultUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmall-livepatch-devel | Jul 23, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-azure-fdeUpgrade linux-image-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-ibmUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-ibm-classicUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-gkeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-azureUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1010-oemUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-raspiUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-awsUpgrade linux-image-6.8.0-1012-azure | Aug 9, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub