NetSight
medium4.4

CVE-2021-47547

In the Linux kernel, the following vulnerability has been resolved: net: tulip: de4x5: fix the problem that the array 'lp->phy[8]' may be out of bound In line …

Impact

In the Linux kernel, the following vulnerability has been resolved: net: tulip: de4x5: fix the problem that the array 'lp->phy[8]' may be out of bound In line 5001, if all id in the array 'lp->phy[8]' is not 0, when the 'for' end, the 'k' is 8. At this time, the array 'lp->phy[8]' may be out of bound.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 4.4.294
from 4.5 before 4.9.292
from 4.10 before 4.14.257
from 4.15 before 4.19.220
from 4.20 before 5.4.164
from 5.5 before 5.10.84

Weakness classification

References