CVE - CVE-2024-38569

CVE-ID
CVE-2024-38569	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group The perf tool allows users to create event groups through following cmd [1], but the driver does not check whether the array index is out of bounds when writing data to the event_group array. If the number of events in an event_group is greater than HISI_PCIE_MAX_COUNTERS, the memory write overflow of event_group array occurs. Add array index check to fix the possible array out of bounds violation, and return directly when write new events are written to array bounds. There are 9 different events in an event_group. [1] perf stat -e '{pmu/event1/, ... ,pmu/event9/}'
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/3d1face00ebb7996842aee4214d7d0fb0c77b1e9 URL:https://git.kernel.org/stable/c/3d1face00ebb7996842aee4214d7d0fb0c77b1e9 MISC:https://git.kernel.org/stable/c/567d34626c22b36579ec0abfdf5eda2949044220 URL:https://git.kernel.org/stable/c/567d34626c22b36579ec0abfdf5eda2949044220 MISC:https://git.kernel.org/stable/c/77fce82678ea5fd51442e62febec2004f79e041b URL:https://git.kernel.org/stable/c/77fce82678ea5fd51442e62febec2004f79e041b MISC:https://git.kernel.org/stable/c/8e9aab2492178f25372f1820bfd9289fbd74efd0 URL:https://git.kernel.org/stable/c/8e9aab2492178f25372f1820bfd9289fbd74efd0 MISC:https://git.kernel.org/stable/c/ff48247144d13a3a0817127703724256008efa78 URL:https://git.kernel.org/stable/c/ff48247144d13a3a0817127703724256008efa78
Assigning CNA
kernel.org
Date Record Created
20240618	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240618)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)