
Cloud Vulnerability DB
A community-led vulnerabilities database
In the Linux kernel, a vulnerability has been identified in the HiSilicon PHY driver, specifically in the hisi_inno_phy_probe() function. The issue involves an incorrect bounds check where the array 'priv->ports[]' of size INNO_PHY_PORT_NUM is accessed with an index 'i' that could potentially exceed the array bounds due to a flawed comparison operator (NVD).
The vulnerability stems from a logical error in the bounds checking mechanism within the hisi_inno_phy_probe() function. The comparison operator used (i > INNO_PHY_PORT_NUM) allows INNO_PHY_PORT_NUM as a valid value for the index 'i', which is incorrect since array indices should be strictly less than the array size. This condition should use >= instead of > to prevent potential out-of-bounds write operations (NVD).
The vulnerability could lead to an out-of-bounds write operation on the next iteration through the loop, potentially causing memory corruption. This could affect systems utilizing the HiSilicon PHY driver in the Linux kernel (NVD).
The issue has been resolved through a patch that corrects the bounds checking logic in the hisi_inno_phy_probe() function. The fix involves changing the comparison operator from '>' to '>=' to ensure proper array bounds checking (NVD).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."