In the Linux kernel, the following vulnerability has been resolved:
phy: hisilicon: Fix an out of bounds check in hisiinnophy_probe()
The size of array 'priv->ports[]' is INNOPHYPORT_NUM.
In the for loop, 'i' is used as the index for array 'priv->ports[]' with a check (i > INNOPHYPORTNUM) which indicates that INNOPHYPORTNUM is allowed value for 'i' in the same loop.
This > comparison needs to be changed to >=, otherwise it potentially leads to an out of bounds write on the next iteration through the loop
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@13c088cf3657d70893d75cf116be937f1509cc0f",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "hisi_inno_phy_probe",
"file": "drivers/phy/hisilicon/phy-hisi-inno-usb2.c"
},
"id": "CVE-2023-53238-0d495a57",
"signature_type": "Function",
"digest": {
"length": 1302.0,
"function_hash": "186740679688174480575601563527688573276"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ce69eac840db0b559994dc4290fce3d7c0d7bccd",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "hisi_inno_phy_probe",
"file": "drivers/phy/hisilicon/phy-hisi-inno-usb2.c"
},
"id": "CVE-2023-53238-2364bf7e",
"signature_type": "Function",
"digest": {
"length": 1259.0,
"function_hash": "294664688752587942356129960691455386963"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2843a2e703f5cb85c9eeca11b7ee90861635a010",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/phy/hisilicon/phy-hisi-inno-usb2.c"
},
"id": "CVE-2023-53238-2a64b4a5",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"48910581758006252746576373714080270529",
"21704527466600770963772611690719041795",
"68025241661628679504891480461279960981",
"157121986043862210659958977427756185999"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ad249aa3c38f329f91fba8b4b3cd087e79fb0ce8",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/phy/hisilicon/phy-hisi-inno-usb2.c"
},
"id": "CVE-2023-53238-3bec56ec",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"48910581758006252746576373714080270529",
"21704527466600770963772611690719041795",
"68025241661628679504891480461279960981",
"157121986043862210659958977427756185999"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6d8a71e4c3a2fa4960cc50996e76a42b62fab677",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "hisi_inno_phy_probe",
"file": "drivers/phy/hisilicon/phy-hisi-inno-usb2.c"
},
"id": "CVE-2023-53238-55685828",
"signature_type": "Function",
"digest": {
"length": 1194.0,
"function_hash": "167639246397598073349354733357369505498"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@195e806b2afb0bad6470c9094f7e45e0cf109ee0",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "hisi_inno_phy_probe",
"file": "drivers/phy/hisilicon/phy-hisi-inno-usb2.c"
},
"id": "CVE-2023-53238-571f62e1",
"signature_type": "Function",
"digest": {
"length": 1256.0,
"function_hash": "236768045160107862258819327280100435535"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@13c088cf3657d70893d75cf116be937f1509cc0f",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/phy/hisilicon/phy-hisi-inno-usb2.c"
},
"id": "CVE-2023-53238-703987a9",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"48910581758006252746576373714080270529",
"21704527466600770963772611690719041795",
"297752987224509419086998328571892445113",
"319882688481367772390174804144241030929"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2843a2e703f5cb85c9eeca11b7ee90861635a010",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "hisi_inno_phy_probe",
"file": "drivers/phy/hisilicon/phy-hisi-inno-usb2.c"
},
"id": "CVE-2023-53238-9b04b6ca",
"signature_type": "Function",
"digest": {
"length": 1256.0,
"function_hash": "236768045160107862258819327280100435535"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6d8a71e4c3a2fa4960cc50996e76a42b62fab677",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/phy/hisilicon/phy-hisi-inno-usb2.c"
},
"id": "CVE-2023-53238-9bd027e0",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"48910581758006252746576373714080270529",
"21704527466600770963772611690719041795",
"68025241661628679504891480461279960981",
"157121986043862210659958977427756185999"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@195e806b2afb0bad6470c9094f7e45e0cf109ee0",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/phy/hisilicon/phy-hisi-inno-usb2.c"
},
"id": "CVE-2023-53238-aa8922dc",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"48910581758006252746576373714080270529",
"21704527466600770963772611690719041795",
"68025241661628679504891480461279960981",
"157121986043862210659958977427756185999"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ad249aa3c38f329f91fba8b4b3cd087e79fb0ce8",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "hisi_inno_phy_probe",
"file": "drivers/phy/hisilicon/phy-hisi-inno-usb2.c"
},
"id": "CVE-2023-53238-ab28fe0b",
"signature_type": "Function",
"digest": {
"length": 1194.0,
"function_hash": "167639246397598073349354733357369505498"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@01cb355bb92e8fcf8306e11a4774d610c5864e39",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/phy/hisilicon/phy-hisi-inno-usb2.c"
},
"id": "CVE-2023-53238-e0a3f3ab",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"48910581758006252746576373714080270529",
"21704527466600770963772611690719041795",
"297752987224509419086998328571892445113",
"319882688481367772390174804144241030929"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ce69eac840db0b559994dc4290fce3d7c0d7bccd",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/phy/hisilicon/phy-hisi-inno-usb2.c"
},
"id": "CVE-2023-53238-e4609dd7",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"48910581758006252746576373714080270529",
"21704527466600770963772611690719041795",
"297752987224509419086998328571892445113",
"319882688481367772390174804144241030929"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@01cb355bb92e8fcf8306e11a4774d610c5864e39",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "hisi_inno_phy_probe",
"file": "drivers/phy/hisilicon/phy-hisi-inno-usb2.c"
},
"id": "CVE-2023-53238-f666fa35",
"signature_type": "Function",
"digest": {
"length": 1259.0,
"function_hash": "294664688752587942356129960691455386963"
}
}
]