CVE-2023-53238

Summary

In the Linux kernel, the following vulnerability has been resolved:

phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe()

The size of array 'priv->ports[]' is INNO_PHY_PORT_NUM.

In the for loop, 'i' is used as the index for array 'priv->ports[]' with a check (i > INNO_PHY_PORT_NUM) which indicates that INNO_PHY_PORT_NUM is allowed value for 'i' in the same loop.

This > comparison needs to be changed to >=, otherwise it potentially leads to an out of bounds write on the next iteration through the loop

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxba8b0ee81fbbc249e60f84bf097bd56e8047c742 < 2843a2e703f5cb85c9eeca11b7ee90861635a010affected
LinuxLinuxba8b0ee81fbbc249e60f84bf097bd56e8047c742 < 195e806b2afb0bad6470c9094f7e45e0cf109ee0affected
LinuxLinuxba8b0ee81fbbc249e60f84bf097bd56e8047c742 < ad249aa3c38f329f91fba8b4b3cd087e79fb0ce8affected
LinuxLinuxba8b0ee81fbbc249e60f84bf097bd56e8047c742 < 6d8a71e4c3a2fa4960cc50996e76a42b62fab677affected
LinuxLinuxba8b0ee81fbbc249e60f84bf097bd56e8047c742 < 01cb355bb92e8fcf8306e11a4774d610c5864e39affected
LinuxLinuxba8b0ee81fbbc249e60f84bf097bd56e8047c742 < ce69eac840db0b559994dc4290fce3d7c0d7bccdaffected
LinuxLinuxba8b0ee81fbbc249e60f84bf097bd56e8047c742 < 13c088cf3657d70893d75cf116be937f1509cc0faffected
LinuxLinux4.17affected
LinuxLinux0 < 4.17unaffected
LinuxLinux4.19.291 <= 4.19.*unaffected
LinuxLinux5.4.253 <= 5.4.*unaffected
LinuxLinux5.10.190 <= 5.10.*unaffected
LinuxLinux5.15.124 <= 5.15.*unaffected
LinuxLinux6.1.43 <= 6.1.*unaffected
LinuxLinux6.4.8 <= 6.4.*unaffected
LinuxLinux6.5 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References