CVE-2021-47548
Description
In the Linux kernel, the following vulnerability has been resolved: ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() The if statement: if (port >= DSAF_GE_NUM) return; limits the value of port less than DSAF_GE_NUM (i.e., 8). However, if the value of port is 6 or 7, an array overflow could occur: port_rst_off = dsaf_dev->mac_cb[port]->port_rst_off; because the length of dsaf_dev->mac_cb is DSAF_MAX_PORT_NUM (i.e., 6). To fix this possible array overflow, we first check port and if it is greater than or equal to DSAF_MAX_PORT_NUM, the function returns.
Predictions
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.
OS impact
| OS | Version | Status | Fixed in |
|---|---|---|---|
| rhel | 9 | fixed | |
| rocky | 8 | fixed | |
| sles | affected | | |
| debian | bookworm | fixed | 5.15.15-1 |
| debian | bullseye | fixed | 5.10.84-1 |
| debian | forky | fixed | 5.15.15-1 |
| debian | sid | fixed | 5.15.15-1 |
| debian | trixie | fixed | 5.15.15-1 |
| rocky | 9 | fixed | |
| almalinux | 8 | fixed | kernel-rt-debug-4.18.0-553.16.1.rt7.357.el8_10.x86_64.rpm |
| almalinux | 9 | fixed | kernel-headers-5.14.0-427.26.1.el9_4.aarch64.rpm |
References
- https://access.redhat.com/errata/RHSA-2024:4583
- https://errata.rockylinux.org/RXSA-2024:5101
- https://errata.rockylinux.org/RLSA-2024:5102
- https://errata.rockylinux.org/RLSA-2024:5101
- https://www.suse.com/security/cve/CVE-2021-47548.html
- https://security-tracker.debian.org/tracker/CVE-2021-47548
- https://errata.rockylinux.org/RLSA-2024:4583
- https://bugzilla.redhat.com/2267509
- https://bugzilla.redhat.com/2273082
- https://bugzilla.redhat.com/2273466
- https://bugzilla.redhat.com/2275735
- https://bugzilla.redhat.com/2277238
- https://bugzilla.redhat.com/2280434
- https://bugzilla.redhat.com/2281131
- https://bugzilla.redhat.com/2281925
- https://bugzilla.redhat.com/2283401
- https://bugzilla.redhat.com/2284541
- https://bugzilla.redhat.com/2284581
- https://bugzilla.redhat.com/2293230
- https://bugzilla.redhat.com/2293380
- https://bugzilla.redhat.com/2293402
- https://bugzilla.redhat.com/2293456
- https://bugzilla.redhat.com/2293653
- https://bugzilla.redhat.com/2294225
- https://errata.almalinux.org/9/ALSA-2024-4583.html
💬 Discuss CVE-2021-47548 on VIR Community →
Community-verified mitigations for this CVE will appear above when contributors publish them.
Verify integrity in audit chain (admin only). AS-IS.