NetSight
IP …
high7.1

CVE-2023-53238

In the Linux kernel, the following vulnerability has been resolved: phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe() The size of array 'priv…

Impact

In the Linux kernel, the following vulnerability has been resolved: phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe() The size of array 'priv->ports[]' is INNO_PHY_PORT_NUM. In the for loop, 'i' is used as the index for array 'priv->ports[]' with a check (i > INNO_PHY_PORT_NUM) which indicates that INNO_PHY_PORT_NUM is allowed value for 'i' in the same loop. This > comparison needs to be changed to >=, otherwise it potentially leads to an out of bounds write on the next iteration through the loop

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.17 before 4.19.291
from 4.20 before 5.4.253
from 5.5 before 5.10.190
from 5.11 before 5.15.124
from 5.16 before 6.1.43
from 6.2 before 6.4.8

Weakness classification

CWE-125

References