Vulnerability in Kernel: hns_dsaf_misc
Summary
GSD-2021-1002554: ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port(). Affects Kernel versions < fc7ffa7f10b9454a86369405d9814bf141b30627. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a fundamental component of the Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. The hns_dsaf_misc module within the Kernel is specifically related to the Ethernet functionality provided by Hisilicon chips. It includes various functions for managing Ethernet ports and related features. However, a vulnerability has been identified in the hns_dsaf_ge_srst_by_port() function, which could lead to an array overflow.
Vulnerability Detail
The hns_dsaf_ge_srst_by_port() function in the hns_dsaf_misc module of the Kernel is susceptible to an array overflow. This vulnerability could potentially be exploited by an attacker to execute arbitrary code or cause a denial-of-service condition. The overflow occurs when processing certain input data, leading to the corruption of adjacent memory locations. The impact and attack plausibility of this vulnerability have not been proven, but it is crucial to address it to ensure the security and stability of systems utilizing the affected Kernel version.
How To Fix
No fixed version is published for this vulnerability.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.15.7 or later. The fix for this issue was implemented in commit fc7ffa7f10b9454a86369405d9814bf141b30627. Updating the Kernel will ensure that the vulnerable code is replaced with the patched version, eliminating the possibility of exploitation.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The vulnerability in the hns_dsaf_misc module of the Kernel poses a potential security risk, allowing for arbitrary code execution or denial-of-service attacks. It is crucial to update the Linux Kernel to version v5.15.7 or later to mitigate this vulnerability. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability could range from arbitrary code execution to a denial-of-service condition, depending on the attacker's capabilities and the targeted system.
No specific workaround has been mentioned for this vulnerability. It is recommended to update the Kernel to the patched version as soon as possible.
The vulnerability is present in the Linux Kernel version prior to v5.15.7.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your package-lock.json file, and Vulert will analyze it for any open-source vulnerabilities, including this one.
You can find more information about this vulnerability in the GSD-2021-1002554 JSON file available on the GitHub repository of the Cloud Security Alliance's GSD Database (https://github.com/cloudsecurityalliance/gsd-database).
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.