drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group (Linux Linux)

CVE-2024-38568
HIGH 7.8

At a glance

Source
NVD
EPSS
EPSS 0.23 % · percentile 14 ()
State
PUBLISHED
Published
Updated
Assigner
Linux
NVD status
Modified

Description

In the Linux kernel, the following vulnerability has been resolved: drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group The perf tool allows users to create event groups through following cmd [1], but the driver does not check whether the array index is out of bounds when writing data to the event_group array. If the number of events in an event_group is greater than HNS3_PMU_MAX_HW_EVENTS, the memory write overflow of event_group array occurs. Add array index check to fix the possible array out of bounds violation, and return directly when write new events are written to array bounds. There are 9 different events in an event_group. [1] perf stat -e '{pmu/event1/, ... ,pmu/event9/}

Weaknesses (CWE)

  • CWE-129 — Improper Validation of Array Index

References

Scores

VersionScoreVectorScored by
CVSS 3.1HIGH 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux
CVSS 3.1HIGH 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HNVD · 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Secondary)
CVSS 3.1HIGH 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HNVD · nvd@nist.gov (Primary)

European references

CERT-FR advisories

Affected configurations (NVD CPE)

Affected products

ProductVersions
Linux · Linuxaffected 66637ab137b44914356a9dc7a9b3f8ebcf0b0695 < 3669baf308308385a2ab391324abdde5682af5aa ; affected 66637ab137b44914356a9dc7a9b3f8ebcf0b0695 < be1fa711e59c874d049f592aef1d4685bdd22bdf ; affected 66637ab137b44914356a9dc7a9b3f8ebcf0b0695 < b5120d322763c15c978bc47beb3b6dff45624304 ; affected 66637ab137b44914356a9dc7a9b3f8ebcf0b0695 < aa2d3d678895c8eedd003f1473f87d3f06fe6ec7 ; affected 66637ab137b44914356a9dc7a9b3f8ebcf0b0695 < 81bdd60a3d1d3b05e6cc6674845afb1694dd3a0e
Linux · Linuxaffected 6.0 ; unaffected 0 < 6.0 ; unaffected 6.1.93 ≤ 6.1.* ; unaffected 6.6.33 ≤ 6.6.* ; unaffected 6.8.12 ≤ 6.8.* ; unaffected 6.9.3 ≤ 6.9.*

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD