Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2023-53238

phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe() The size of array 'priv->ports[]' is INNO_PHY_PORT_NUM. In the for loop, 'i' is used as the index for array 'priv->ports[]' with a check (i > INNO_PHY_PORT_NUM) which indicates that INNO_PHY_PORT_NUM is allowed value for 'i' in the same loop. This > comparison needs to be changed to >=, otherwise it potentially leads to an out of bounds write on the next iteration through the loop

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • ba8b0ee81fbbc249e60f84bf097bd56e8047c742 to < 2843a2e703f5cb85c9eeca11b7ee90861635a010affected
  • ba8b0ee81fbbc249e60f84bf097bd56e8047c742 to < 195e806b2afb0bad6470c9094f7e45e0cf109ee0affected
  • ba8b0ee81fbbc249e60f84bf097bd56e8047c742 to < ad249aa3c38f329f91fba8b4b3cd087e79fb0ce8affected
  • ba8b0ee81fbbc249e60f84bf097bd56e8047c742 to < 6d8a71e4c3a2fa4960cc50996e76a42b62fab677affected
  • ba8b0ee81fbbc249e60f84bf097bd56e8047c742 to < 01cb355bb92e8fcf8306e11a4774d610c5864e39affected
  • ba8b0ee81fbbc249e60f84bf097bd56e8047c742 to < ce69eac840db0b559994dc4290fce3d7c0d7bccdaffected
  • ba8b0ee81fbbc249e60f84bf097bd56e8047c742 to < 13c088cf3657d70893d75cf116be937f1509cc0faffected

Linux Linux

Default version status: affected

  • 4.17affected
  • 0 to < 4.17unaffected
  • 4.19.291 to ≤ 4.19.*unaffected
  • 5.4.253 to ≤ 5.4.*unaffected
  • 5.10.190 to ≤ 5.10.*unaffected
  • 5.15.124 to ≤ 5.15.*unaffected
  • 6.1.43 to ≤ 6.1.*unaffected
  • 6.4.8 to ≤ 6.4.*unaffected
  • 6.5 to ≤ *unaffected

References