CVE-2023-52807

HIGH

Linux Kernel - Out-of-Bounds Read in HNS3 DebugFS Coalesce Info

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs The hns3 driver define an array of string to show the coalesce info, but if the kernel adds a new mode or a new state, out-of-bounds access may occur when coalesce info is read via debugfs, this patch fix the problem.

References (4)

Core 4

Scores

CVSS v3 7.8
EPSS 0.0025
EPSS Percentile 15.8%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-129
Status published
Products (12)
Linux/Linux < 5.16
Linux/Linux 5.16
Linux/Linux 6.1.64 - 6.1.*
Linux/Linux 6.5.13 - 6.5.*
Linux/Linux 6.6.3 - 6.6.*
Linux/Linux 6.7
Linux/Linux c99fead7cb07979f5db38035ccb5f02ad2c7106a - 07f5b8c47152cadbd9102e053dcb60685820aa09
Linux/Linux c99fead7cb07979f5db38035ccb5f02ad2c7106a - 53aba458f23846112c0d44239580ff59bc5c36c3
Linux/Linux c99fead7cb07979f5db38035ccb5f02ad2c7106a - be1f703f39efa27b7371b9a4cd983317f1366792
Linux/Linux c99fead7cb07979f5db38035ccb5f02ad2c7106a - f79d985c69060047426be68b7e4c1663d5d731b4
... and 2 more
Published May 21, 2024
Tracked Since Feb 18, 2026