CVE-2021-47548
published 2024-05-24CVE-2021-47548: In the Linux kernel, the following vulnerability has been resolved: ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in…
PriorityP348critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
1.36%
68.8th percentile
In the Linux kernel, the following vulnerability has been resolved:
ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port()
The if statement:
if (port >= DSAF_GE_NUM)
return;
limits the value of port less than DSAF_GE_NUM (i.e., 8).
However, if the value of port is 6 or 7, an array overflow could occur:
port_rst_off = dsaf_dev->mac_cb[port]->port_rst_off;
because the length of dsaf_dev->mac_cb is DSAF_MAX_PORT_NUM (i.e., 6).
To fix this possible array overflow, we first check port and if it is
greater than or equal to DSAF_MAX_PORT_NUM, the function returns.
Affected
20 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.15.15-1 (bookworm) | linux 5.15.15-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 850bfa3b78ea8849fef78ed74f5f2ccf947db0ca < 948968f8747650447c8f21c9fdba0e1973be040b | 948968f8747650447c8f21c9fdba0e1973be040b |
| linux | linux | >= 850bfa3b78ea8849fef78ed74f5f2ccf947db0ca < abbd5faa0748d0aa95d5191d56ff7a17a6275bd1 | abbd5faa0748d0aa95d5191d56ff7a17a6275bd1 |
| linux | linux | >= 850bfa3b78ea8849fef78ed74f5f2ccf947db0ca < dd07f8971b81ad98cc754b179b331b57f35aa1ff | dd07f8971b81ad98cc754b179b331b57f35aa1ff |
| linux | linux | >= 850bfa3b78ea8849fef78ed74f5f2ccf947db0ca < 99bb25cb6753beaf2c2bc37927c2ecc0ceff3f6d | 99bb25cb6753beaf2c2bc37927c2ecc0ceff3f6d |
| linux | linux | >= 850bfa3b78ea8849fef78ed74f5f2ccf947db0ca < 22519eff7df2d88adcc2568d86046ce1e2b52803 | 22519eff7df2d88adcc2568d86046ce1e2b52803 |
| linux | linux | >= 850bfa3b78ea8849fef78ed74f5f2ccf947db0ca < fc7ffa7f10b9454a86369405d9814bf141b30627 | fc7ffa7f10b9454a86369405d9814bf141b30627 |
| linux | linux | >= 850bfa3b78ea8849fef78ed74f5f2ccf947db0ca < a66998e0fbf213d47d02813b9679426129d0d114 | a66998e0fbf213d47d02813b9679426129d0d114 |
| linux | linux_kernel | < 4.9.292 | 4.9.292 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.84-1 | 5.10.84-1 |
| linux | linux_kernel | >= 0 < 5.15.15-1 | 5.15.15-1 |
| linux | linux_kernel | >= 0 < 5.15.15-1 | 5.15.15-1 |
| linux | linux_kernel | >= 0 < 5.15.15-1 | 5.15.15-1 |
| linux | linux_kernel | >= 4.10 < 4.14.257 | 4.14.257 |
| linux | linux_kernel | >= 4.15 < 4.19.220 | 4.19.220 |
| linux | linux_kernel | >= 4.20 < 5.4.164 | 5.4.164 |
| linux | linux_kernel | >= 5.11 < 5.15.7 | 5.15.7 |
| linux | linux_kernel | >= 5.5 < 5.10.84 | 5.10.84 |
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
osv9.8CRITICAL
vendor_debian9.8CRITICAL
vendor_redhat9.8CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port()
vendor_redhat·2024-05-24·CVSS 9.8
CVE-2021-47548 [CRITICAL] CWE-129 kernel: ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port()
kernel: ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port()
In the Linux kernel, the following vulnerability has been resolved:
ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port()
The if statement:
if (port >= DSAF_GE_NUM)
return;
limits the value of port less than DSAF_GE_NUM (i.e., 8).
However, if the value of port is 6 or 7, an array overflow could occur:
port_rst_off = dsaf_dev->mac_cb[port]->port_rst_off;
because the length of dsaf_dev->mac_cb is DSAF_MAX_PORT_NUM (i.e., 6).
To fix this possible array overflow, we first check port and if it is
greater than or equal to DSAF_MAX_PORT_NUM, the function returns.
A vulnerability was found in the Linux kernel's Hisilicon Ethernet driver, in t
Debian
CVE-2021-47548: linux - In the Linux kernel, the following vulnerability has been resolved: ethernet: h...
vendor_debian·2021·CVSS 9.8
CVE-2021-47548 [CRITICAL] CVE-2021-47548: linux - In the Linux kernel, the following vulnerability has been resolved: ethernet: h...
In the Linux kernel, the following vulnerability has been resolved: ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() The if statement: if (port >= DSAF_GE_NUM) return; limits the value of port less than DSAF_GE_NUM (i.e., 8). However, if the value of port is 6 or 7, an array overflow could occur: port_rst_off = dsaf_dev->mac_cb[port]->port_rst_off; because the length of dsaf_dev->mac_cb is DSAF_MAX_PORT_NUM (i.e., 6). To fix this possible array overflow, we first check port and if it is greater than or equal to DSAF_MAX_PORT_NUM, the function returns.
Scope: local
bookworm: resolved (fixed in 5.15.15-1)
bullseye: resolved (fixed in 5.10.84-1)
forky: resolved (fixed in 5.15.15-1)
sid: resolved (fixed in 5.15.15-1)
trixie: resolved (fixed i
OSV
CVE-2021-47548: In the Linux kernel, the following vulnerability has been resolved: ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf
osv·2024-05-24·CVSS 9.8
CVE-2021-47548 [CRITICAL] CVE-2021-47548: In the Linux kernel, the following vulnerability has been resolved: ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf
In the Linux kernel, the following vulnerability has been resolved: ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() The if statement: if (port >= DSAF_GE_NUM) return; limits the value of port less than DSAF_GE_NUM (i.e., 8). However, if the value of port is 6 or 7, an array overflow could occur: port_rst_off = dsaf_dev->mac_cb[port]->port_rst_off; because the length of dsaf_dev->mac_cb is DSAF_MAX_PORT_NUM (i.e., 6). To fix this possible array overflow, we first check port and if it is greater than or equal to DSAF_MAX_PORT_NUM, the function returns.
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/22519eff7df2d88adcc2568d86046ce1e2b52803https://git.kernel.org/stable/c/948968f8747650447c8f21c9fdba0e1973be040bhttps://git.kernel.org/stable/c/99bb25cb6753beaf2c2bc37927c2ecc0ceff3f6dhttps://git.kernel.org/stable/c/a66998e0fbf213d47d02813b9679426129d0d114https://git.kernel.org/stable/c/abbd5faa0748d0aa95d5191d56ff7a17a6275bd1https://git.kernel.org/stable/c/dd07f8971b81ad98cc754b179b331b57f35aa1ffhttps://git.kernel.org/stable/c/fc7ffa7f10b9454a86369405d9814bf141b30627https://git.kernel.org/stable/c/22519eff7df2d88adcc2568d86046ce1e2b52803https://git.kernel.org/stable/c/948968f8747650447c8f21c9fdba0e1973be040bhttps://git.kernel.org/stable/c/99bb25cb6753beaf2c2bc37927c2ecc0ceff3f6dhttps://git.kernel.org/stable/c/a66998e0fbf213d47d02813b9679426129d0d114https://git.kernel.org/stable/c/abbd5faa0748d0aa95d5191d56ff7a17a6275bd1https://git.kernel.org/stable/c/dd07f8971b81ad98cc754b179b331b57f35aa1ffhttps://git.kernel.org/stable/c/fc7ffa7f10b9454a86369405d9814bf141b30627
2024-05-24
Published