CVE-2024-38568

Summary

In the Linux kernel, the following vulnerability has been resolved:

drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group

The perf tool allows users to create event groups through following cmd [1], but the driver does not check whether the array index is out of bounds when writing data to the event_group array. If the number of events in an event_group is greater than HNS3_PMU_MAX_HW_EVENTS, the memory write overflow of event_group array occurs.

Add array index check to fix the possible array out of bounds violation, and return directly when write new events are written to array bounds.

There are 9 different events in an event_group. [1] perf stat -e '{pmu/event1/, … ,pmu/event9/}

Affected Software

VendorProductVersion RangeStatus
LinuxLinux66637ab137b44914356a9dc7a9b3f8ebcf0b0695 < 3669baf308308385a2ab391324abdde5682af5aaaffected
LinuxLinux66637ab137b44914356a9dc7a9b3f8ebcf0b0695 < be1fa711e59c874d049f592aef1d4685bdd22bdfaffected
LinuxLinux66637ab137b44914356a9dc7a9b3f8ebcf0b0695 < b5120d322763c15c978bc47beb3b6dff45624304affected
LinuxLinux66637ab137b44914356a9dc7a9b3f8ebcf0b0695 < aa2d3d678895c8eedd003f1473f87d3f06fe6ec7affected
LinuxLinux66637ab137b44914356a9dc7a9b3f8ebcf0b0695 < 81bdd60a3d1d3b05e6cc6674845afb1694dd3a0eaffected
LinuxLinux6.0affected
LinuxLinux0 < 6.0unaffected
LinuxLinux6.1.93 <= 6.1.*unaffected
LinuxLinux6.6.33 <= 6.6.*unaffected
LinuxLinux6.8.12 <= 6.8.*unaffected
LinuxLinux6.9.3 <= 6.9.*unaffected
LinuxLinux6.10 <= *unaffected

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References