CVE-2021-47548: ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port()

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-05-24 · updated 2026-06-17
Weakness: CWE-129

Description

In the Linux kernel, the following vulnerability has been resolved: ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() The if statement: if (port >= DSAF_GE_NUM) return; limits the value of port less than DSAF_GE_NUM (i.e., 8). However, if the value of port is 6 or 7, an array overflow could occur: port_rst_off = dsaf_dev->mac_cb[port]->port_rst_off; because the length of dsaf_dev->mac_cb is DSAF_MAX_PORT_NUM (i.e., 6). To fix this possible array overflow, we first check port and if it is greater than or equal to DSAF_MAX_PORT_NUM, the function returns.

Affected products

Linux kernel: before 4.9.292; from 4.10 before 4.14.257; from 4.15 before 4.19.220; from 4.20 before 5.4.164; from 5.5 before 5.10.84; from 5.11 before 5.15.7 — fixed in 4.14.257, 4.19.220, 4.9.292, 5.10.84, 5.15.7, 5.4.164

How to fix

Upgrade to a fixed version: Linux kernel 4.14.257, 4.19.220, 4.9.292, 5.10.84. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2021-47548 or the next vulnerability affects your stack