CVE-2021-47548: Linux Kernel

Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() The if statement: if (port >= DSAF_GE_NUM) return; limits the value of port less than DSAF_GE_NUM (i.e., 8). However, if the value of port is 6 or 7, an array overflow could occur: port_rst_off = dsaf_dev->mac_cb[port]->port_rst_off; because the length of dsaf_dev->mac_cb is DSAF_MAX_PORT_NUM (i.e., 6). To fix this possible array overflow, we first check port and if it is greater than or equal to DSAF_MAX_PORT_NUM, the function returns.

Affected products

• Linux Linux Kernel: before 4.9.292 (fixed in 4.9.292); from 4.10, before 4.14.257 (fixed in 4.14.257); from 4.15, before 4.19.220 (fixed in 4.19.220); from 4.20, before 5.4.164 (fixed in 5.4.164); from 5.5, before 5.10.84 (fixed in 5.10.84); from 5.11, before 5.15.7 (fixed in 5.15.7); …

Published 2024-05-24. Last modified 2026-06-17.