Loading story…
The Linux kernel fixed CVE-2021-47548, an array-overflow flaw in the HiSilicon HNS Ethernet driver's hns_dsaf_ge_srst_by_port() function. The function accepted port values below DSAF_GE_NUM (8) but used them to index the mac_cb array, which contains only DSAF_MAX_PORT_NUM (6) entries; values 6 and 7 could therefore access memory beyond the array and potentially cause memory corruption. The correction rejects port values greater than or equal to DSAF_MAX_PORT_NUM before the array access.
Upstream fixes are available in Linux kernel versions 4.9.292, 4.14.257, 4.19.220, 5.4.164, 5.10.84, 5.15.7, 5.16, and later stable releases. Red Hat rated the issue Moderate with CVSS 6.0, citing a network attack vector and high privileges required, and issued patched RHEL 8 and 9 kernel packages across supported update streams. The affected HNS module is supplied only on aarch64, so Red Hat x86_64 and s390x systems are unaffected.
See affected versions and whether adversaries are exploiting it.
6 events from the most recent confirmed update back to the earliest known activity.
Red Hat released RHSA-2024:5101 and RHSA-2024:5102, providing fixes for CVE-2021-47548 in Red Hat Enterprise Linux 8 kernel and kernel-rt packages.
Red Hat released RHSA-2024:4902 to fix CVE-2021-47548 for RHEL 8.6 Advanced Mission Critical Update Support, Telecommunications Update Service, and Update Services for SAP Solutions.
Red Hat released RHSA-2024:4740 to address CVE-2021-47548 in Red Hat Enterprise Linux 8.8 Extended Update Support.
Red Hat released RHSA-2024:4583, providing a CVE-2021-47548 fix for Red Hat Enterprise Linux 9 kernel packages.
Red Hat released fixes for CVE-2021-47548 for Red Hat Enterprise Linux 9.2 Extended Update Support through RHSA-2024:4533 and RHSA-2024:4554, covering kernel and kernel-rt packages.
The Linux kernel CVE team published an advisory for CVE-2021-47548, an out-of-bounds array access in the HiSilicon HNS Ethernet driver's hns_dsaf_ge_srst_by_port() function. The advisory explained that port values 6 and 7 could index beyond the six-entry mac_cb array and documented a bounds-check fix available in multiple stable kernel versions.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See whether adversaries are exploiting this yet, and where the affected versions run in your environment.
3 references tracked. Mallory keeps watching after this page renders.
redhat.com
Open sourcebugzilla.redhat.com
Open sourcelore.kernel.org
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
**CVE-2021-47560** is a NULL-pointer dereference in the Linux kernel's Mellanox `mlxsw` Spectrum driver. Buggy firmware can send port up/down events for the CPU port (local port 0), which has no associated network-device structure; processing those events can crash the kernel and cause a denial of service. The flaw was introduced in Linux 5.4 and is mitigated by ignoring events for the CPU port. Upstream fixes are included in Linux kernel versions 5.10.83, 5.15.6, and 5.16 and later. Red Hat rated the issue moderate severity (CVSS 4.4), noting local high-privilege access requirements, while NVD assigned a 5.5 score; patched kernel and `kernel-rt` packages are available for affected RHEL 8 and 9 systems, whereas RHEL 6 is unaffected and RHEL 7 is out of support scope.
Aug 26, 2026
**CVE-2023-42753** is a high-severity Linux kernel Netfilter flaw in the `hash:net,port,net` ipset implementation. A missing `IP_SET_HASH_WITH_NET0` macro causes an incorrect `CIDR_POS(c)` array-offset calculation, permitting integer underflow and an out-of-bounds increment or decrement of the `h->nets` array. A local low-privileged attacker could crash an affected system and potentially elevate privileges; Red Hat rated the issue CVSS 7.0, while NVD assigned 7.8. Upstream corrected the defect in commit `050d91c03b28ca479df13dfb02bcd2c60dd6a878`, with Fedora including the fix in kernel 6.5.3. Red Hat issued updates across affected RHEL 7, 8, and 9 package streams, including RHEL 8.8 live-kernel patches delivered through RHSA-2023:7558; the `kpatch-patch` modules load automatically and apply the fix without a conventional reboot. No practical mitigation is available, so organizations should update affected kernel packages promptly; RHEL 7.6 was assessed as unaffected because it rejects `/0` netmasks.
Aug 26, 2026
**CVE-2021-47101** affects the Linux kernel's ASIX USB networking driver in `drivers/net/usb/asix_common.c`. A short response from `asix_read_cmd()` in `asix_mdio_read()` can leave the `smsr` buffer uninitialized before `asix_check_host_enable()` uses it, potentially exposing uninitialized memory data or causing availability impacts through local exploitation. The flaw was introduced in Linux 4.9 and is fixed upstream in kernel versions 5.15.12 and 5.16 and later. Red Hat rates the issue at CVSS 6.0, while NVD assigns 7.1. Fixes are available for standard and real-time kernels in Red Hat Enterprise Linux 8 and the standard kernel in RHEL 9, including RHEL 9.4 Extended Update Support; the RHEL 9 `kernel-rt` package remains affected. Organizations using ASIX USB network adapters should deploy the latest vendor-supported kernel updates rather than cherry-picking individual patches.
Aug 26, 2026