CVE-2023-52807

HIGH

Linux Kernel - Out-of-Bounds Read in HNS3 DebugFS Coalesce Info

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs The hns3 driver define an array of string to show the coalesce info, but if the kernel adds a new mode or a new state, out-of-bounds access may occur when coalesce info is read via debugfs, this patch fix the problem.

References (4)

Core 4

Scores

CVSS v3 7.8
EPSS 0.0025
EPSS Percentile 16.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-129
Status published
Products (15)
linux/Kernel 5.16.0 - 6.1.64linux
linux/Kernel 6.2.0 - 6.5.13linux
linux/Kernel 6.6.0 - 6.6.3linux
Linux/Linux < 5.16
Linux/Linux 5.16
Linux/Linux 6.1.64 - 6.1.*
Linux/Linux 6.5.13 - 6.5.*
Linux/Linux 6.6.3 - 6.6.*
Linux/Linux 6.7
Linux/Linux c99fead7cb07979f5db38035ccb5f02ad2c7106a - 07f5b8c47152cadbd9102e053dcb60685820aa09
... and 5 more
Published May 21, 2024
Tracked Since Feb 18, 2026