CVE-2024-44988

Summary

In the Linux kernel, the following vulnerability has been resolved:

net: dsa: mv88e6xxx: Fix out-of-bound access

If an ATU violation was caused by a CPU Load operation, the SPID could be larger than DSA_MAX_PORTS (the size of mv88e6xxx_chip.ports[] array).

Affected Software

VendorProductVersion RangeStatus
LinuxLinux27a2fa0098171199022affa76bdf15d77585457f < 4a88fca95c8df3746b71e31f44a02d35f06f9864affected
LinuxLinux75c05a74e745ae7d663b04d75777af80ada2233c < d39f5be62f098fe367d672b4dd4bc4b2b80e08e7affected
LinuxLinux75c05a74e745ae7d663b04d75777af80ada2233c < 050e7274ab2150cd212b2372595720e7b83a15bdaffected
LinuxLinux75c05a74e745ae7d663b04d75777af80ada2233c < a10d0337115a6d223a1563d853d4455f05d0b2e3affected
LinuxLinux75c05a74e745ae7d663b04d75777af80ada2233c < 18b2e833daf049223ab3c2efdf8cdee08854c484affected
LinuxLinux75c05a74e745ae7d663b04d75777af80ada2233c < f7d8c2fabd39250cf2333fbf8eef67e837f90a5daffected
LinuxLinux75c05a74e745ae7d663b04d75777af80ada2233c < f87ce03c652dba199aef15ac18ade3991db5477eaffected
LinuxLinux75c05a74e745ae7d663b04d75777af80ada2233c < 528876d867a23b5198022baf2e388052ca67c952affected
LinuxLinux1657d2814e83d3e338d6d60c5829d15d86645bc0affected
LinuxLinux4.19.21 < 4.19.323affected
LinuxLinux4.20.8 < 4.21affected
LinuxLinux5.0affected
LinuxLinux0 < 5.0unaffected
LinuxLinux4.19.323 <= 4.19.*unaffected
LinuxLinux5.4.283 <= 5.4.*unaffected
LinuxLinux5.10.225 <= 5.10.*unaffected
LinuxLinux5.15.166 <= 5.15.*unaffected
LinuxLinux6.1.107 <= 6.1.*unaffected
LinuxLinux6.6.48 <= 6.6.*unaffected
LinuxLinux6.10.7 <= 6.10.*unaffected
LinuxLinux6.11 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References