CVE-2024-44988

net: dsa: mv88e6xxx: Fix out-of-bound access

MEDIUM

5.5

CVSS Score

Published: September 4, 2024 at 07:54 PM UTC

Updated: August 5, 2026 at 12:04 PM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.4%

SSVC

No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: Fix out-of-bound access If an ATU violation was caused by a CPU Load operation, the SPID could be larger than DSA_MAX_PORTS (the size of mv88e6xxx_chip.ports[] array).

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

v ≥ 4.20.84.19.21 ≤ v < 4.19.3234.19.21 ≤ v < 4.204.20.8 ≤ v < 4.214.20.8 ≤ v < 5.05.0 ≤ v < 5.10.2255.0 ≤ v < 5.15.1665.0 ≤ v < 5.4.2835.0 ≤ v < 6.1.1075.0 ≤ v < 6.10.75.0 ≤ v < 6.115.0 ≤ v < 6.6.485.11 ≤ v < 5.15.1665.16 ≤ v < 6.1.1075.5 ≤ v < 5.10.2256.2 ≤ v < 6.6.486.7 ≤ v < 6.10.71657d2814e83d3e338d6d60c5829d15d86645bc027a2fa0098171199022affa76bdf15d77585457f4.19.21 4.20.8 6.11 rc1 6.11 rc2 6.11 rc3 6.11 rc475c05a74e745ae7d663b04d75777af80ada2233c

Vendor states this is fixed in 050e7274ab2150cd212b2372595720e7b83a15bd (fixed)

Vendor states this is fixed in 18b2e833daf049223ab3c2efdf8cdee08854c484 (fixed)

Vendor states this is fixed in 4a88fca95c8df3746b71e31f44a02d35f06f9864 (fixed)

Vendor states this is fixed in 528876d867a23b5198022baf2e388052ca67c952 (fixed)

Vendor states this is fixed in a10d0337115a6d223a1563d853d4455f05d0b2e3 (fixed)

Vendor states this is fixed in d39f5be62f098fe367d672b4dd4bc4b2b80e08e7 (fixed)

Vendor states this is fixed in f7d8c2fabd39250cf2333fbf8eef67e837f90a5d (fixed)

Vendor states this is fixed in f87ce03c652dba199aef15ac18ade3991db5477e (fixed)

Vendor states this is fixed in 4.19.323 (unaffected)

Affected range stops below 4.20, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.21, so it looks safe — our inference, not a vendor statement

Vendor states this is fixed in 5.0 (unaffected)

Vendor states this is fixed in 5.10.225 (unaffected)

Vendor states this is fixed in 5.15.166 (unaffected)

Vendor states this is fixed in 5.4.283 (unaffected)

Vendor states this is fixed in 6.1.107 (unaffected)

Vendor states this is fixed in 6.10.7 (unaffected)

Vendor states this is fixed in 6.11 (unaffected)

Vendor states this is fixed in 6.6.48 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references