NetSight
IP …
high8.8

CVE-2024-44988

In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: Fix out-of-bound access If an ATU violation was caused by a CPU Load o…

Impact

In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: Fix out-of-bound access If an ATU violation was caused by a CPU Load operation, the SPID could be larger than DSA_MAX_PORTS (the size of mv88e6xxx_chip.ports[] array).

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.19.21 before 4.20
from 4.20.8 before 5.0
from 5.0 before 5.4.283
from 5.5 before 5.10.225
from 5.11 before 5.15.166
from 5.16 before 6.1.107

References