CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's octeontx2-af component, specifically related to the cgx_speed_mbps array, which can be accessed out-of-bounds if the RESP_LINKSTAT_SPEED returns a value of 13 or higher. This out-of-bounds access could lead to potential crashes or unpredictable behavior in systems utilizing this component. Organizations using affected Linux kernel versions, particularly those relying on the octeontx2-af for network functions, should prioritize applying the fix to mitigate risks associated with this vulnerability.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: CGX: add bounds check to cgx_speed_mbps index cgx_speed_mbps has 13 elements but RESP_LINKSTAT_SPEED can yield values 0-15. If it returns a value >= 13, this causes an out-of-bounds array access. Add a bounds check and default to speed 0 if the index is out of range.
Related CVEs
Other vulnerabilities affecting the same vendor(s)