CVE-2024-44988

MediumCVSS 5.5/10Last modified Aug 4, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

net: dsa: mv88e6xxx: Fix out-of-bound access

If an ATU violation was caused by a CPU Load operation, the SPID could be larger than DSA_MAX_PORTS (the size of mv88e6xxx_chip.ports[] array).

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= 27a2fa0098171199022affa76bdf15d77585457f, < 4a88fca95c8df3746b71e31f44a02d35f06f9864; >= 75c05a74e745ae7d663b04d75777af80ada2233c, < d39f5be62f098fe367d672b4dd4bc4b2b80e08e7; >= 75c05a74e745ae7d663b04d75777af80ada2233c, < 050e7274ab2150cd212b2372595720e7b83a15bd; >= 75c05a74e745ae7d663b04d75777af80ada2233c, < a10d0337115a6d223a1563d853d4455f05d0b2e3; >= 75c05a74e745ae7d663b04d75777af80ada2233c, < 18b2e833daf049223ab3c2efdf8cdee08854c484; >= 75c05a74e745ae7d663b04d75777af80ada2233c, < f7d8c2fabd39250cf2333fbf8eef67e837f90a5d; >= 75c05a74e745ae7d663b04d75777af80ada2233c, < f87ce03c652dba199aef15ac18ade3991db5477e; >= 75c05a74e745ae7d663b04d75777af80ada2233c, < 528876d867a23b5198022baf2e388052ca67c952; 1657d2814e83d3e338d6d60c5829d15d86645bc0; >= 4.19.21, < 4.19.323; >= 4.20.8, < 4.21
LinuxLinux5.0

References

Timeline

Published
Sep 4, 2024
Last modified
Aug 4, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-449895.5In the Linux kernel, the following vulnerability has been resolved: bonding: fix xfrm real_dev null pointer dereference We shouldn't set rCVE-2024-44996.3A Cross-Site Request Forgery (CSRF) vulnerability exists in the XTTS server of parisneo/lollms version 9.6 due to a lax CORS policy. The vulCVE-2024-449905.5In the Linux kernel, the following vulnerability has been resolved: bonding: fix null pointer deref in bond_ipsec_offload_ok We must checkCVE-2024-449915.5In the Linux kernel, the following vulnerability has been resolved: tcp: prevent concurrent execution of tcp_sk_exit_batch Its possible thCVE-2024-449925.5In the Linux kernel, the following vulnerability has been resolved: smb/client: avoid possible NULL dereference in cifs_free_subrequest() CVE-2024-449937.1In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Fix out-of-bounds read in `v3d_csd_job_run()` When enabling UCVE-2024-449945.5In the Linux kernel, the following vulnerability has been resolved: iommu: Restore lost return in iommu_report_device_fault() When iommu_rCVE-2024-449955.5In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix a deadlock problem when config TC during resetting WhenCVE-2024-449965.5In the Linux kernel, the following vulnerability has been resolved: vsock: fix recursive ->recvmsg calls After a vsock socket has been addCVE-2024-449977.8In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_wed: fix use-after-free panic in mtk_wed_setup_tc_blCVE-2024-449987.8In the Linux kernel, the following vulnerability has been resolved: atm: idt77252: prevent use after free in dequeue_rx() We can't dereferCVE-2024-449997.1In the Linux kernel, the following vulnerability has been resolved: gtp: pull network headers in gtp_dev_xmit() syzbot/KMSAN reported use
CVE-2024-44988: Medium severity, CVSS 5.5 | Vulnix