CVE-2021-42327
Fixed in a distro release EPSS <1%
dp_link_settings_write in drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c in the Linux kernel through 5.14.14 allows a heap-based buffer overflow by an attacker who can write a string to the AMD GPU display drivers debug filesystem. There are no checks on size within parse_write_buffer_into_params when it uses the size of copy_from_user to copy a userspace buffer into a 40-byte heap buffer.
Products: linux_kernel, fedoraproject fedora, netapp h300s_firmware, netapp h500s_firmware, netapp h700s_firmware, netapp h300e_firmware, netapp h500e_firmware, netapp h700e_firmware, netapp h410s_firmware, netapp h410c_firmware
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Arch Linux | linux | 5.14.16.arch1-1 |
| Arch Linux | linux-hardened | 5.14.16.hardened1-1 |
| Arch Linux | linux-lts | 5.10.77-1 |
| Arch Linux | linux-zen | 5.14.16.zen1-1 |
| Debian 12 | linux | 5.14.16-1 |
| Debian 13 | linux | 5.14.16-1 |
| Debian 14 | linux | 5.14.16-1 |
| SUSE Linux Enterprise Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5-RT_Update_16 | 1-150500.11.3.1 |
| SUSE Linux Enterprise Micro 5.3 | kernel-rt | 5.14.21-150400.15.106.1 |
| SUSE Linux Enterprise Micro 5.3 | kernel-source-rt | 5.14.21-150400.15.106.1 |
| SUSE Linux Enterprise Micro 5.4 | kernel-rt | 5.14.21-150400.15.106.1 |
| SUSE Linux Enterprise Micro 5.4 | kernel-source-rt | 5.14.21-150400.15.106.1 |
| SUSE Linux Enterprise Micro 5.5 | kernel-rt | 5.14.21-150500.13.58.1 |
| SUSE Linux Enterprise Micro 5.5 | kernel-source-rt | 5.14.21-150500.13.58.1 |
| SUSE Real Time Module 15 SP5 | kernel-rt | 5.14.21-150500.13.58.1 |
| SUSE Real Time Module 15 SP5 | kernel-rt_debug | 5.14.21-150500.13.58.1 |
| SUSE Real Time Module 15 SP5 | kernel-source-rt | 5.14.21-150500.13.58.1 |
| SUSE Real Time Module 15 SP5 | kernel-syms-rt | 5.14.21-150500.13.58.1 |
| Ubuntu 16.04 LTS | linux-hwe-edge | no fix |
| Ubuntu 18.04 LTS | linux-aws-5.0 | no fix |
| Ubuntu 18.04 LTS | linux-aws-5.3 | no fix |
| Ubuntu 18.04 LTS | linux-azure | no fix |
| Ubuntu 18.04 LTS | linux-azure-5.3 | no fix |
| Ubuntu 18.04 LTS | linux-azure-edge | no fix |
| Ubuntu 18.04 LTS | linux-gcp | no fix |
| Ubuntu 18.04 LTS | linux-gcp-5.3 | no fix |
| Ubuntu 18.04 LTS | linux-gke-4.15 | no fix |
| Ubuntu 18.04 LTS | linux-hwe | no fix |
| Ubuntu 18.04 LTS | linux-hwe-edge | no fix |
| Ubuntu 18.04 LTS | linux-oem | no fix |
| Ubuntu 18.04 LTS | linux-oracle-5.0 | no fix |
| Ubuntu 18.04 LTS | linux-oracle-5.3 | no fix |
| Ubuntu 20.04 LTS | linux-aws-5.11 | 5.11.0-1028.31~20.04.1 |
| Ubuntu 20.04 LTS | linux-aws-5.13 | 5.13.0-1012.13~20.04.1 |
| Ubuntu 20.04 LTS | linux-aws-5.8 | no fix |
| Ubuntu 20.04 LTS | linux-azure-5.11 | 5.11.0-1028.31~20.04.2 |
| Ubuntu 20.04 LTS | linux-azure-5.13 | 5.13.0-1013.15~20.04.1 |
| Ubuntu 20.04 LTS | linux-azure-5.8 | no fix |
| Ubuntu 20.04 LTS | linux-gcp-5.11 | 5.11.0-1029.33~20.04.3 |
| Ubuntu 20.04 LTS | linux-gcp-5.13 | 5.13.0-1013.16~20.04.1 |
| Ubuntu 20.04 LTS | linux-gcp-5.8 | no fix |
| Ubuntu 20.04 LTS | linux-hwe-5.11 | no fix |
| Ubuntu 20.04 LTS | linux-hwe-5.13 | 5.13.0-28.31~20.04.1 |
| Ubuntu 20.04 LTS | linux-intel-5.13 | 5.13.0-1010.10 |
| Ubuntu 20.04 LTS | linux-oem-5.10 | no fix |
| Ubuntu 20.04 LTS | linux-oem-5.13 | 5.13.0-1029.36 |
| Ubuntu 20.04 LTS | linux-oem-5.14 | 5.14.0-1008.8 |
| Ubuntu 20.04 LTS | linux-oem-5.6 | no fix |
| Ubuntu 20.04 LTS | linux-oracle-5.11 | 5.11.0-1028.31~20.04.1 |
| Ubuntu 20.04 LTS | linux-oracle-5.13 | 5.13.0-1016.20~20.04.1 |
| Ubuntu 20.04 LTS | linux-oracle-5.8 | no fix |
| Ubuntu 20.04 LTS | linux-raspi2 | no fix |
| Ubuntu 20.04 LTS | linux-riscv | no fix |
| Ubuntu 20.04 LTS | linux-riscv-5.11 | no fix |
| Ubuntu 20.04 LTS | linux-riscv-5.8 | no fix |
| openSUSE Leap 15.5 | kernel-rt | 5.14.21-150500.13.58.1 |
| openSUSE Leap 15.5 | kernel-rt_debug | 5.14.21-150500.13.58.1 |
| openSUSE Leap 15.5 | kernel-source-rt | 5.14.21-150500.13.58.1 |
| openSUSE Leap 15.5 | kernel-syms-rt | 5.14.21-150500.13.58.1 |