CVE-2023-52807
published 2024-05-21CVE-2023-52807: In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs The…
PriorityP338high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.25%
16.3th percentile
In the Linux kernel, the following vulnerability has been resolved:
net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
The hns3 driver define an array of string to show the coalesce
info, but if the kernel adds a new mode or a new state,
out-of-bounds access may occur when coalesce info is read via
debugfs, this patch fix the problem.
Affected
13 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.64-1 (bookworm) | linux 6.1.64-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= c99fead7cb07979f5db38035ccb5f02ad2c7106a < 07f5b8c47152cadbd9102e053dcb60685820aa09 | 07f5b8c47152cadbd9102e053dcb60685820aa09 |
| linux | linux | >= c99fead7cb07979f5db38035ccb5f02ad2c7106a < be1f703f39efa27b7371b9a4cd983317f1366792 | be1f703f39efa27b7371b9a4cd983317f1366792 |
| linux | linux | >= c99fead7cb07979f5db38035ccb5f02ad2c7106a < f79d985c69060047426be68b7e4c1663d5d731b4 | f79d985c69060047426be68b7e4c1663d5d731b4 |
| linux | linux | >= c99fead7cb07979f5db38035ccb5f02ad2c7106a < 53aba458f23846112c0d44239580ff59bc5c36c3 | 53aba458f23846112c0d44239580ff59bc5c36c3 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 6.1.64-1 | 6.1.64-1 |
| linux | linux_kernel | >= 0 < 6.6.8-1 | 6.6.8-1 |
| linux | linux_kernel | >= 0 < 6.6.8-1 | 6.6.8-1 |
| linux | linux_kernel | >= 5.16 < 6.1.64 | 6.1.64 |
| linux | linux_kernel | >= 6.2 < 6.5.13 | 6.5.13 |
| linux | linux_kernel | >= 6.6 < 6.6.3 | 6.6.3 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_debian7.8HIGH
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-rwr5-hmxr-6v8j: In the Linux kernel, the following vulnerability has been resolved:
net: hns3: fix out-of-bounds access may occur when coalesce info is read via debu
ghsa_unreviewed·2024-05-21
CVE-2023-52807 [HIGH] CWE-129 GHSA-rwr5-hmxr-6v8j: In the Linux kernel, the following vulnerability has been resolved:
net: hns3: fix out-of-bounds access may occur when coalesce info is read via debu
In the Linux kernel, the following vulnerability has been resolved:
net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
The hns3 driver define an array of string to show the coalesce
info, but if the kernel adds a new mode or a new state,
out-of-bounds access may occur when coalesce info is read via
debugfs, this patch fix the problem.
OSV
CVE-2023-52807: In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix out-of-bounds access may occur when coalesce info is read via debug
osv·2024-05-21·CVSS 7.8
CVE-2023-52807 [HIGH] CVE-2023-52807: In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix out-of-bounds access may occur when coalesce info is read via debug
In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs The hns3 driver define an array of string to show the coalesce info, but if the kernel adds a new mode or a new state, out-of-bounds access may occur when coalesce info is read via debugfs, this patch fix the problem.
Red Hat
kernel: net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
vendor_redhat·2024-05-21·CVSS 7.8
CVE-2023-52807 [HIGH] CWE-125 kernel: net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
kernel: net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
In the Linux kernel, the following vulnerability has been resolved:
net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
The hns3 driver define an array of string to show the coalesce
info, but if the kernel adds a new mode or a new state,
out-of-bounds access may occur when coalesce info is read via
debugfs, this patch fix the problem.
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel (Red Hat Enterprise Linux 8) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 8) - Not affected
Package: kernel (Red Ha
Debian
CVE-2023-52807: linux - In the Linux kernel, the following vulnerability has been resolved: net: hns3: ...
vendor_debian·2023·CVSS 7.8
CVE-2023-52807 [HIGH] CVE-2023-52807: linux - In the Linux kernel, the following vulnerability has been resolved: net: hns3: ...
In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs The hns3 driver define an array of string to show the coalesce info, but if the kernel adds a new mode or a new state, out-of-bounds access may occur when coalesce info is read via debugfs, this patch fix the problem.
Scope: local
bookworm: resolved (fixed in 6.1.64-1)
bullseye: resolved
forky: resolved (fixed in 6.6.8-1)
sid: resolved (fixed in 6.6.8-1)
trixie: resolved (fixed in 6.6.8-1)
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/07f5b8c47152cadbd9102e053dcb60685820aa09https://git.kernel.org/stable/c/53aba458f23846112c0d44239580ff59bc5c36c3https://git.kernel.org/stable/c/be1f703f39efa27b7371b9a4cd983317f1366792https://git.kernel.org/stable/c/f79d985c69060047426be68b7e4c1663d5d731b4https://git.kernel.org/stable/c/07f5b8c47152cadbd9102e053dcb60685820aa09https://git.kernel.org/stable/c/53aba458f23846112c0d44239580ff59bc5c36c3https://git.kernel.org/stable/c/be1f703f39efa27b7371b9a4cd983317f1366792https://git.kernel.org/stable/c/f79d985c69060047426be68b7e4c1663d5d731b4
2024-05-21
Published