CVE-2023-53238
kernel: phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe()
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · September 15, 2025
Updated · June 30, 2026
Description
In the Linux kernel, the following vulnerability has been resolved:
phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe()
The size of array 'priv->ports[]' is INNO_PHY_PORT_NUM.
In the for loop, 'i' is used as the index for array 'priv->ports[]' with a check (i > INNO_PHY_PORT_NUM) which indicates that INNO_PHY_PORT_NUM is allowed value for 'i' in the same loop.
This > comparison needs to be changed to >=, otherwise it potentially leads to an out of bounds write on the next iteration through the loop
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE not specified