CVE-2024-46833

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to an out-of-bounds array access in the Linux kernel's hns3 network driver. Specifically, when querying the SSU register information, the loop iterates tnl num times, but tnl num comes from hardware and the array length is fixed. This can lead to an array out-of-bounds condition, potentially affecting the confidentiality, integrity, and availability of protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.