In the Linux kernel, the following vulnerability has been resolved:
phy: hisilicon: Fix an out of bounds check in hisiinnophy_probe()
The size of array 'priv->ports[]' is INNOPHYPORT_NUM.
In the for loop, 'i' is used as the index for array 'priv->ports[]' with a check (i > INNOPHYPORTNUM) which indicates that INNOPHYPORTNUM is allowed value for 'i' in the same loop.
This > comparison needs to be changed to >=, otherwise it potentially leads to an out of bounds write on the next iteration through the loop
[
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 1194.0,
"function_hash": "167639246397598073349354733357369505498"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6d8a71e4c3a2fa4960cc50996e76a42b62fab677",
"target": {
"file": "drivers/phy/hisilicon/phy-hisi-inno-usb2.c",
"function": "hisi_inno_phy_probe"
},
"id": "CVE-2023-53238-55685828"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 1256.0,
"function_hash": "236768045160107862258819327280100435535"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@195e806b2afb0bad6470c9094f7e45e0cf109ee0",
"target": {
"file": "drivers/phy/hisilicon/phy-hisi-inno-usb2.c",
"function": "hisi_inno_phy_probe"
},
"id": "CVE-2023-53238-571f62e1"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"48910581758006252746576373714080270529",
"21704527466600770963772611690719041795",
"68025241661628679504891480461279960981",
"157121986043862210659958977427756185999"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6d8a71e4c3a2fa4960cc50996e76a42b62fab677",
"target": {
"file": "drivers/phy/hisilicon/phy-hisi-inno-usb2.c"
},
"id": "CVE-2023-53238-9bd027e0"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"48910581758006252746576373714080270529",
"21704527466600770963772611690719041795",
"68025241661628679504891480461279960981",
"157121986043862210659958977427756185999"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@195e806b2afb0bad6470c9094f7e45e0cf109ee0",
"target": {
"file": "drivers/phy/hisilicon/phy-hisi-inno-usb2.c"
},
"id": "CVE-2023-53238-aa8922dc"
}
]