In the Linux kernel, the following vulnerability has been resolved:
net: dsa: mv88e6xxx: Fix out-of-bound access
If an ATU violation was caused by a CPU Load operation, the SPID could be larger than DSAMAXPORTS (the size of mv88e6xxx_chip.ports[] array).
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/44xxx/CVE-2024-44988.json"
}"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-44988.json"
[
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a10d0337115a6d223a1563d853d4455f05d0b2e3",
"digest": {
"function_hash": "50369156020896209082812907127553436656",
"length": 1254.0
},
"id": "CVE-2024-44988-04d29297",
"deprecated": false,
"target": {
"file": "drivers/net/dsa/mv88e6xxx/global1_atu.c",
"function": "mv88e6xxx_g1_atu_prob_irq_thread_fn"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@050e7274ab2150cd212b2372595720e7b83a15bd",
"digest": {
"function_hash": "50369156020896209082812907127553436656",
"length": 1254.0
},
"id": "CVE-2024-44988-119a8020",
"deprecated": false,
"target": {
"file": "drivers/net/dsa/mv88e6xxx/global1_atu.c",
"function": "mv88e6xxx_g1_atu_prob_irq_thread_fn"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a10d0337115a6d223a1563d853d4455f05d0b2e3",
"digest": {
"line_hashes": [
"146552799399755386718585641371949855231",
"176527528574066490121955243445733204711",
"91383059127923163288586846234391633395",
"47012583958180556379220499514842464570"
],
"threshold": 0.9
},
"id": "CVE-2024-44988-2b500d84",
"deprecated": false,
"target": {
"file": "drivers/net/dsa/mv88e6xxx/global1_atu.c"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@528876d867a23b5198022baf2e388052ca67c952",
"digest": {
"function_hash": "35144427351047535022979007547917957527",
"length": 1313.0
},
"id": "CVE-2024-44988-36f4ed92",
"deprecated": false,
"target": {
"file": "drivers/net/dsa/mv88e6xxx/global1_atu.c",
"function": "mv88e6xxx_g1_atu_prob_irq_thread_fn"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d39f5be62f098fe367d672b4dd4bc4b2b80e08e7",
"digest": {
"line_hashes": [
"146552799399755386718585641371949855231",
"176527528574066490121955243445733204711",
"91383059127923163288586846234391633395",
"47012583958180556379220499514842464570"
],
"threshold": 0.9
},
"id": "CVE-2024-44988-3ea42556",
"deprecated": false,
"target": {
"file": "drivers/net/dsa/mv88e6xxx/global1_atu.c"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@18b2e833daf049223ab3c2efdf8cdee08854c484",
"digest": {
"line_hashes": [
"146552799399755386718585641371949855231",
"176527528574066490121955243445733204711",
"91383059127923163288586846234391633395",
"47012583958180556379220499514842464570"
],
"threshold": 0.9
},
"id": "CVE-2024-44988-72dbede0",
"deprecated": false,
"target": {
"file": "drivers/net/dsa/mv88e6xxx/global1_atu.c"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@528876d867a23b5198022baf2e388052ca67c952",
"digest": {
"line_hashes": [
"146552799399755386718585641371949855231",
"176527528574066490121955243445733204711",
"273821988511731638916915659333133076022",
"138084809012691376856323791082263757729"
],
"threshold": 0.9
},
"id": "CVE-2024-44988-948ea6be",
"deprecated": false,
"target": {
"file": "drivers/net/dsa/mv88e6xxx/global1_atu.c"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d39f5be62f098fe367d672b4dd4bc4b2b80e08e7",
"digest": {
"function_hash": "50369156020896209082812907127553436656",
"length": 1254.0
},
"id": "CVE-2024-44988-953f8969",
"deprecated": false,
"target": {
"file": "drivers/net/dsa/mv88e6xxx/global1_atu.c",
"function": "mv88e6xxx_g1_atu_prob_irq_thread_fn"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f87ce03c652dba199aef15ac18ade3991db5477e",
"digest": {
"line_hashes": [
"146552799399755386718585641371949855231",
"176527528574066490121955243445733204711",
"273821988511731638916915659333133076022",
"138084809012691376856323791082263757729"
],
"threshold": 0.9
},
"id": "CVE-2024-44988-bbd5ced1",
"deprecated": false,
"target": {
"file": "drivers/net/dsa/mv88e6xxx/global1_atu.c"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f7d8c2fabd39250cf2333fbf8eef67e837f90a5d",
"digest": {
"line_hashes": [
"146552799399755386718585641371949855231",
"176527528574066490121955243445733204711",
"273821988511731638916915659333133076022",
"138084809012691376856323791082263757729"
],
"threshold": 0.9
},
"id": "CVE-2024-44988-c4dcec5b",
"deprecated": false,
"target": {
"file": "drivers/net/dsa/mv88e6xxx/global1_atu.c"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f87ce03c652dba199aef15ac18ade3991db5477e",
"digest": {
"function_hash": "35144427351047535022979007547917957527",
"length": 1313.0
},
"id": "CVE-2024-44988-d6482828",
"deprecated": false,
"target": {
"file": "drivers/net/dsa/mv88e6xxx/global1_atu.c",
"function": "mv88e6xxx_g1_atu_prob_irq_thread_fn"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4a88fca95c8df3746b71e31f44a02d35f06f9864",
"digest": {
"function_hash": "229330968818000011367996973922032932535",
"length": 1425.0
},
"id": "CVE-2024-44988-dc42bbe2",
"deprecated": false,
"target": {
"file": "drivers/net/dsa/mv88e6xxx/global1_atu.c",
"function": "mv88e6xxx_g1_atu_prob_irq_thread_fn"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f7d8c2fabd39250cf2333fbf8eef67e837f90a5d",
"digest": {
"function_hash": "35144427351047535022979007547917957527",
"length": 1313.0
},
"id": "CVE-2024-44988-e8e25b9f",
"deprecated": false,
"target": {
"file": "drivers/net/dsa/mv88e6xxx/global1_atu.c",
"function": "mv88e6xxx_g1_atu_prob_irq_thread_fn"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@18b2e833daf049223ab3c2efdf8cdee08854c484",
"digest": {
"function_hash": "50369156020896209082812907127553436656",
"length": 1254.0
},
"id": "CVE-2024-44988-f73beb1d",
"deprecated": false,
"target": {
"file": "drivers/net/dsa/mv88e6xxx/global1_atu.c",
"function": "mv88e6xxx_g1_atu_prob_irq_thread_fn"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@050e7274ab2150cd212b2372595720e7b83a15bd",
"digest": {
"line_hashes": [
"146552799399755386718585641371949855231",
"176527528574066490121955243445733204711",
"91383059127923163288586846234391633395",
"47012583958180556379220499514842464570"
],
"threshold": 0.9
},
"id": "CVE-2024-44988-f802931c",
"deprecated": false,
"target": {
"file": "drivers/net/dsa/mv88e6xxx/global1_atu.c"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4a88fca95c8df3746b71e31f44a02d35f06f9864",
"digest": {
"line_hashes": [
"113616482800047942175454047090061111895",
"140044511863924662131906232449573512699",
"11814982927672252760952422201788654030",
"292849869994191613139873242808533871337"
],
"threshold": 0.9
},
"id": "CVE-2024-44988-f9688358",
"deprecated": false,
"target": {
"file": "drivers/net/dsa/mv88e6xxx/global1_atu.c"
}
}
]