Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2024-44988

net: dsa: mv88e6xxx: Fix out-of-bound access

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: Fix out-of-bound access If an ATU violation was caused by a CPU Load operation, the SPID could be larger than DSA_MAX_PORTS (the size of mv88e6xxx_chip.ports[] array).

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 27a2fa0098171199022affa76bdf15d77585457f to < 4a88fca95c8df3746b71e31f44a02d35f06f9864affected
  • 75c05a74e745ae7d663b04d75777af80ada2233c to < d39f5be62f098fe367d672b4dd4bc4b2b80e08e7affected
  • 75c05a74e745ae7d663b04d75777af80ada2233c to < 050e7274ab2150cd212b2372595720e7b83a15bdaffected
  • 75c05a74e745ae7d663b04d75777af80ada2233c to < a10d0337115a6d223a1563d853d4455f05d0b2e3affected
  • 75c05a74e745ae7d663b04d75777af80ada2233c to < 18b2e833daf049223ab3c2efdf8cdee08854c484affected
  • 75c05a74e745ae7d663b04d75777af80ada2233c to < f7d8c2fabd39250cf2333fbf8eef67e837f90a5daffected
  • 75c05a74e745ae7d663b04d75777af80ada2233c to < f87ce03c652dba199aef15ac18ade3991db5477eaffected
  • 75c05a74e745ae7d663b04d75777af80ada2233c to < 528876d867a23b5198022baf2e388052ca67c952affected
  • 1657d2814e83d3e338d6d60c5829d15d86645bc0affected
  • 4.19.21 to < 4.19.323affected
  • 4.20.8 to < 4.21affected

Linux Linux

Default version status: affected

  • 5.0affected
  • 0 to < 5.0unaffected
  • 4.19.323 to ≤ 4.19.*unaffected
  • 5.4.283 to ≤ 5.4.*unaffected
  • 5.10.225 to ≤ 5.10.*unaffected
  • 5.15.166 to ≤ 5.15.*unaffected
  • 6.1.107 to ≤ 6.1.*unaffected
  • 6.6.48 to ≤ 6.6.*unaffected
  • 6.10.7 to ≤ 6.10.*unaffected
  • 6.11 to ≤ *unaffected

References