CVE-2021-47548

high
Published 2024-07-17 · Modified 2024-11-03
CVSS v3
VIR risk
8.0

Description

In the Linux kernel, the following vulnerability has been resolved: ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() The if statement: if (port >= DSAF_GE_NUM) return; limits the value of port less than DSAF_GE_NUM (i.e., 8). However, if the value of port is 6 or 7, an array overflow could occur: port_rst_off = dsaf_dev->mac_cb[port]->port_rst_off; because the length of dsaf_dev->mac_cb is DSAF_MAX_PORT_NUM (i.e., 6). To fix this possible array overflow, we first check port and if it is greater than or equal to DSAF_MAX_PORT_NUM, the function returns.

Predictions

Exploit likelihood
20%
Patch ETA

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

OS impact

OSVersionStatusFixed in
redhat rhel9fixed
rockylinux rocky8fixed
suse slesaffected
debian debianbookwormfixed5.15.15-1
debian debianbullseyefixed5.10.84-1
debian debianforkyfixed5.15.15-1
debian debiansidfixed5.15.15-1
debian debiantrixiefixed5.15.15-1
rockylinux rocky9fixed
almalinux almalinux8fixedkernel-rt-debug-4.18.0-553.16.1.rt7.357.el8_10.x86_64.rpm
almalinux almalinux9fixedkernel-headers-5.14.0-427.26.1.el9_4.aarch64.rpm

References

💬 Discuss CVE-2021-47548 on VIR Community →

Community-verified mitigations for this CVE will appear above when contributors publish them.

Verify integrity in audit chain (admin only). AS-IS.