← CVE Intelligence

CVE-2024-44988

net: dsa: mv88e6xxx: Fix out-of-bound access PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: Fix out-of-bound access If an ATU violation was caused by a CPU Load operation, the SPID could be larger than DSA_MAX_PORTS (the size of mv88e6xxx_chip.ports[] array).

Affected (CNA)

Vendor / productVersions
Linux / Linuxaffected 27a2fa0098171199022affa76bdf15d77585457f before 4a88fca95c8df3746b71e31f44a02d35f06f9864; affected 75c05a74e745ae7d663b04d75777af80ada2233c before d39f5be62f098fe367d672b4dd4bc4b2b80e08e7; affected 75c05a74e745ae7d663b04d75777af80ada2233c before 050e7274ab2150cd212b2372595720e7b83a15bd; affected 75c05a74e745ae7d663b04d75777af80ada2233c before a10d0337115a6d223a1563d853d4455f05d0b2e3; affected 75c05a74e745ae7d663b04d75777af80ada2233c before 18b2e833daf049223ab3c2efdf8cdee08854c484; affected 75c05a74e745ae7d663b04d75777af80ada2233c before f7d8c2fabd39250cf2333fbf8eef67e837f90a5d; affected 75c05a74e745ae7d663b04d75777af80ada2233c before f87ce03c652dba199aef15ac18ade3991db5477e; affected 75c05a74e745ae7d663b04d75777af80ada2233c before 528876d867a23b5198022baf2e388052ca67c952; affected 1657d2814e83d3e338d6d60c5829d15d86645bc0; affected 4.19.21 before 4.19.323; affected 4.20.8 before 4.21
Linux / Linuxaffected 5.0; unaffected 0 before 5.0; unaffected 4.19.323 through 4.19.*; unaffected 5.4.283 through 5.4.*; unaffected 5.10.225 through 5.10.*; unaffected 5.15.166 through 5.15.*; unaffected 6.1.107 through 6.1.*; unaffected 6.6.48 through 6.6.*; unaffected 6.10.7 through 6.10.*; unaffected 6.11 through *

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.