CVE-2021-42327

Katalog CVE

CVSS 6.7 · Medium EPSS 0,87%

Kerentanan Out-of-bounds Write pada linux kernel, fedoraproject fedora +8 lainnya. Skor CVSS 3.1 6.7 (Medium) menurut NVD.

Deskripsi (NVD)

dp_link_settings_write in drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c in the Linux kernel through 5.14.14 allows a heap-based buffer overflow by an attacker who can write a string to the AMD GPU display drivers debug filesystem. There are no checks on size within parse_write_buffer_into_params when it uses the size of copy_from_user to copy a userspace buffer into a 40-byte heap buffer.

Rincian

Terbit di NVD

21 Oktober 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.7 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,87% peluang dieksploitasi; lebih tinggi dari 57,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/log/drivers/gpu/drm/amd/display/amdgpu_dm/a... advisory vendor
• https://security.netapp.com/advisory/ntap-20211118-0005/ advisory pihak ketiga
• https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f23750b5b3d98653b31d4469592935ef636...
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RDDEW4APTYKJK...
• https://www.mail-archive.com/amd-gfx%40lists.freedesktop.org/msg69080.html