Patchwire CVEs, their patch status, and feeds to follow them

CVE-2021-28952

Fixed in a distro release EPSS <1%

An issue was discovered in the Linux kernel through 5.11.8. The sound/soc/qcom/sdm845.c soundwire device driver has a buffer overflow when an unexpected port ID number is encountered, aka CID-1c668e1c0a0f. (This has been fixed in 5.12-rc4.)

Published 2021-03-20 · CVE record · OSV

Products: linux_kernel, fedoraproject fedora, netapp cloud_backup, netapp a250_firmware, netapp aff_500f_firmware, netapp fas_500f_firmware, netapp solidfire_baseboard_management_controller_firmware

Distro releases

ReleasePackageFixed in
Arch Linuxlinux5.11.9.arch1-1
Arch Linuxlinux-hardened5.11.9.hardened1-1
Arch Linuxlinux-lts5.10.26-1
Arch Linuxlinux-zen5.11.9.zen1-1
Debian 12linux5.10.26-1
Debian 13linux5.10.26-1
Debian 14linux5.10.26-1
SUSE Linux Enterprise High Availability Extension 15 SP3kernel-default5.3.18-59.5.2
SUSE Linux Enterprise Live Patching 15 SP3kernel-default5.3.18-59.5.2
SUSE Linux Enterprise Live Patching 15 SP3kernel-livepatch-SLE15-SP3_Update_11-7.5.1
SUSE Linux Enterprise Module for Basesystem 15 SP3kernel-64kb5.3.18-59.5.2
SUSE Linux Enterprise Module for Basesystem 15 SP3kernel-default5.3.18-59.5.2
SUSE Linux Enterprise Module for Basesystem 15 SP3kernel-default-base5.3.18-59.5.2.18.2.2
SUSE Linux Enterprise Module for Basesystem 15 SP3kernel-preempt5.3.18-59.5.2
SUSE Linux Enterprise Module for Basesystem 15 SP3kernel-source5.3.18-59.5.2
SUSE Linux Enterprise Module for Basesystem 15 SP3kernel-zfcpdump5.3.18-59.5.2
SUSE Linux Enterprise Module for Development Tools 15 SP3kernel-docs5.3.18-59.5.2
SUSE Linux Enterprise Module for Development Tools 15 SP3kernel-obs-build5.3.18-59.5.1
SUSE Linux Enterprise Module for Development Tools 15 SP3kernel-preempt5.3.18-59.5.2
SUSE Linux Enterprise Module for Development Tools 15 SP3kernel-source5.3.18-59.5.2
SUSE Linux Enterprise Module for Development Tools 15 SP3kernel-syms5.3.18-59.5.1
SUSE Linux Enterprise Module for Legacy 15 SP3kernel-default5.3.18-59.5.2
SUSE Linux Enterprise Module for Public Cloud 15 SP3kernel-azure5.3.18-38.3.1
SUSE Linux Enterprise Module for Public Cloud 15 SP3kernel-source-azure5.3.18-38.3.1
SUSE Linux Enterprise Module for Public Cloud 15 SP3kernel-syms-azure5.3.18-38.3.1
SUSE Linux Enterprise Workstation Extension 15 SP3kernel-default5.3.18-59.5.2
SUSE Linux Enterprise Workstation Extension 15 SP3kernel-preempt5.3.18-59.5.2
Ubuntu 16.04 LTSlinux-hwe-edgeno fix
Ubuntu 18.04 LTSlinux-aws-5.0no fix
Ubuntu 18.04 LTSlinux-aws-5.3no fix
Ubuntu 18.04 LTSlinux-azureno fix
Ubuntu 18.04 LTSlinux-azure-5.3no fix
Ubuntu 18.04 LTSlinux-azure-edgeno fix
Ubuntu 18.04 LTSlinux-gcpno fix
Ubuntu 18.04 LTSlinux-gcp-5.3no fix
Ubuntu 18.04 LTSlinux-gcp-edgeno fix
Ubuntu 18.04 LTSlinux-gke-4.15no fix
Ubuntu 18.04 LTSlinux-hweno fix
Ubuntu 18.04 LTSlinux-hwe-edgeno fix
Ubuntu 18.04 LTSlinux-oemno fix
Ubuntu 18.04 LTSlinux-oracle-5.0no fix
Ubuntu 18.04 LTSlinux-oracle-5.3no fix
Ubuntu 20.04 LTSlinux-hwe-5.85.8.0-55.62~20.04.1
Ubuntu 20.04 LTSlinux-oem-5.105.10.0-1026.27
Ubuntu 20.04 LTSlinux-oem-5.105.10.0-1025.26
Ubuntu 20.04 LTSlinux-raspi2no fix
Ubuntu 20.04 LTSlinux-riscvno fix
Ubuntu 20.04 LTSlinux-riscv-5.85.8.0-26.28~20.04.1
openSUSE Leap 15.3kernel-64kb5.3.18-59.5.2
openSUSE Leap 15.3kernel-azure5.3.18-38.3.1
openSUSE Leap 15.3kernel-debug5.3.18-59.5.2
openSUSE Leap 15.3kernel-default5.3.18-59.5.2
openSUSE Leap 15.3kernel-default-base5.3.18-59.5.2.18.2.2
openSUSE Leap 15.3kernel-docs5.3.18-59.5.2
openSUSE Leap 15.3kernel-kvmsmall5.3.18-59.5.2
openSUSE Leap 15.3kernel-obs-build5.3.18-59.5.1
openSUSE Leap 15.3kernel-obs-qa5.3.18-59.5.1
openSUSE Leap 15.3kernel-preempt5.3.18-59.5.2
openSUSE Leap 15.3kernel-source5.3.18-59.5.2
openSUSE Leap 15.3kernel-source-azure5.3.18-38.3.1
openSUSE Leap 15.3kernel-syms5.3.18-59.5.1
openSUSE Leap 15.3kernel-syms-azure5.3.18-38.3.1
openSUSE Leap 15.3kernel-zfcpdump5.3.18-59.5.2