CVE-2021-42327 log
| Source |
|
| Severity | Medium |
| Remote | No |
| Type | Arbitrary code execution |
| Description | dp_link_settings_write in drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c in the Linux kernel before version 5.14.16 allows a heap-based buffer overflow by an attacker who can write a string to the AMD GPU display drivers debug filesystem. There are no checks on size within parse_write_buffer_into_params when it uses the size of copy_from_user to copy a userspace buffer into a 40-byte heap buffer. |
| Group | Package | Affected | Fixed | Severity | Status | Ticket |
|---|---|---|---|---|---|---|
| AVG-2515 | linux-lts | 5.10.76-1 | 5.10.77-1 | High | Fixed | |
| AVG-2514 | linux-zen | 5.14.15.zen1-1 | 5.14.16.zen1-1 | High | Fixed | |
| AVG-2513 | linux | 5.14.15.arch1-1 | 5.14.16.arch1-1 | High | Fixed | |
| AVG-2499 | linux-hardened | 5.14.14.hardened1-1 | 5.14.16.hardened1-1 | High | Fixed |